Probleme internet explorer • page 2

nanoua971 · le 09 Avr 2010 17:14

nanoua971 a écrit:j'ai essayer less autres modes sa passe sans soucis
et oui j'ai le cd dinstallation livré avec le pc.

mais sauf avec "dernière bonne configuration connu" sa ne passe pas

jeanmimigab · le 09 Avr 2010 21:31

bonsoir,

quels sont les modes qui fonctionne et te permettent de démarrer le pc ?
par exemple>> mode sans échec >> mode sans échec avec prise en charge réseau etc...

@++

nanoua971 · le 09 Avr 2010 22:04

les modes qui me permettent de démarrer le pc sont : le mode sans échec, le mode sans echec avec prise ne charge réseau, et le mode invite de commande en mode sans échec
voila c tout

jeanmimigab · le 10 Avr 2010 20:03

bonsoir,

Très bien, on va tenter une restauration à une date antérieure...

1.Cliques sur Menu démarrer/programmes/accessoires/outils système/restauration système
2.choisie restaurer mon ordinateur à une date antérieure et clique sur suivant
3.sélectionne un point de restauration (le plus ancien possible) dans le tableau ressemblant à un calendrier et clique sur suivant et suis les instruction.

/!\ une fois le processus commencé, ne l'interrompe surtout pas /!\

ensuite dit moi si le mode de démarrage normal re-fonctionne :wink:

nanoua971 · le 12 Avr 2010 00:41

Ca ne fonctionne pas
Quand j'arrive sur la page pour choisir une date de restauration j'ai un message qui me dit : "Aucun point de restauration n'a été crée sur le disque système de l'ordinateur. Pour créer un point de restauration ouvrez la protection système.

jeanmimigab · le 12 Avr 2010 21:09

bonsoir,

bon c'est louper, apparemment la restauration du système était désactivée ce qui fait que tu n'as pas de points de restaurations .

Sauvegarde tous tes documents importants sur un support externe (disque dure, clelfs USB ou CD/DVD)

Il est possible que tu ai chopper "Virut" ou une de ces variantes donc...
Tes sauvegardes ne doivent comporter aucun fichier .exe , .scr , .htm , .html , .php
ne conserver que les documents perso et autres fichiers de suites bureautiques,les photos, la musique,
les clips perso, les favs ou marque-pages.

Quand cela est fait, dit le moi :wink:

@++

nanoua971 · le 18 Avr 2010 02:06

ca y est c'est fait
Maintenant je fait koi

jeanmimigab · le 18 Avr 2010 20:32

bonsoir,

ok, nickel...

on vas tenter une désinfection en effectuant une suppression des fichiers infectieux, si celle ci echoue tu devras restaurer ton pc au moyen des CD de restaurations fournis
Si c'est le cas je te guiderai sur la procédure qui consiste à faire une restauration "usine" (en fait tu récupère le système dans l'état où il était fournis comme le premier jour où tu as allumer le pc ), mais on en est pas encore là...

Poste un nouveau rapport OTL comme tu l'as fait la première fois stp... :wink:

nanoua971 · le 18 Avr 2010 23:20

OTL logfile created on: 18/04/2010 17:52:04 - Run 1
OTL by OldTimer - Version 3.2.1.2 Folder = C:\Users\USER\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 37,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 70,00% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 55,58 Gb Free Space | 37,29% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 951,81 Mb Total Space | 108,48 Mb Free Space | 11,40% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-USER
Current User Name: USER
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\USER\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Windows\System32\regsvr32.exe (Microsoft Corporation)
PRC - C:\Users\USER\Documents\jeux\Visual_Boy_Advance_V1.7.2_win_Fr\VisualBoyAdvance.exe (None)

========== Modules (SafeList) ==========

MOD - C:\Users\USER\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (CLTNetCnService) -- File not found
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV - (aswUpdSv) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (fsssvc) -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (Boonty Games) -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (BOONTY)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (StarWindServiceAE) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software)

========== Driver Services (SafeList) ==========

DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (fssfltr) -- C:\Windows\System32\drivers\fssfltr.sys (Microsoft Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (FETND6V) -- C:\Windows\System32\drivers\fetnd6v.sys (VIA Technologies, Inc. )
DRV - (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) -- C:\Windows\System32\drivers\s0016unic.sys (MCCI Corporation)
DRV - (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) -- C:\Windows\System32\drivers\s0016nd5.sys (MCCI Corporation)
DRV - (s0016mdfl) -- C:\Windows\System32\drivers\s0016mdfl.sys (MCCI Corporation)
DRV - (s0016mdm) -- C:\Windows\System32\drivers\s0016mdm.sys (MCCI Corporation)
DRV - (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s0016mgmt.sys (MCCI Corporation)
DRV - (s0016obex) -- C:\Windows\System32\drivers\s0016obex.sys (MCCI Corporation)
DRV - (s0016bus) Sony Ericsson Device 0016 driver (WDM) -- C:\Windows\System32\drivers\s0016bus.sys (MCCI Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (a016obex) -- C:\Windows\System32\drivers\a016obex.sys (MCCI Corporation)
DRV - (a016mdm) -- C:\Windows\System32\drivers\a016mdm.sys (MCCI Corporation)
DRV - (a016mgmt) Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\a016mgmt.sys (MCCI Corporation)
DRV - (a016mdfl) -- C:\Windows\System32\drivers\a016mdfl.sys (MCCI Corporation)
DRV - (a016bus) Sony Ericsson Device A016 driver (WDM) -- C:\Windows\System32\drivers\a016bus.sys (MCCI Corporation)
DRV - (VIAHdAudAddService) -- C:\Windows\System32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (s117obex) -- C:\Windows\System32\drivers\s117obex.sys (MCCI Corporation)
DRV - (s117mdm) -- C:\Windows\System32\drivers\s117mdm.sys (MCCI Corporation)
DRV - (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM) -- C:\Windows\System32\drivers\s117mgmt.sys (MCCI Corporation)
DRV - (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM) -- C:\Windows\System32\drivers\s117unic.sys (MCCI Corporation)
DRV - (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS) -- C:\Windows\System32\drivers\s117nd5.sys (MCCI Corporation)
DRV - (s117mdfl) -- C:\Windows\System32\drivers\s117mdfl.sys (MCCI Corporation)
DRV - (s117bus) Sony Ericsson Device 117 driver (WDM) -- C:\Windows\System32\drivers\s117bus.sys (MCCI Corporation)
DRV - (S3GIGP) -- C:\Windows\System32\drivers\VTGKModeDX32.sys (S3 Graphics Co., Ltd.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (SNPSTD3) USB PC Camera (SNPSTD3) -- C:\Windows\System32\drivers\snpstd3.sys (Sonix Co. Ltd.)
DRV - (JRAID) -- C:\Windows\system32\drivers\jraid.sys (JMicron Technology Corp.)
DRV - (SIS163u) -- C:\Windows\System32\drivers\sis163u.sys (Silicon Integrated Systems Corp.)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) NVIDIA nForce(tm) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (smserial) -- C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\Windows\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\Windows\System32\drivers\sfdrv01.sys (Protection Technology)
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\Windows\System32\drivers\sfhlp02.sys (Protection Technology)
DRV - (eusk2par) -- C:\Windows\System32\drivers\eusk2par.sys (EUTRON)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\URLSearchHook: {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/av ... x_homepage
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 64 1F 7B 00 03 14 E6 41 80 CC 16 A6 78 7C A6 76 [binary data]
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/av ... x_homepage
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 64 1F 7B 00 03 14 E6 41 80 CC 16 A6 78 7C A6 76 [binary data]
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/av ... x_homepage
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 64 1F 7B 00 03 14 E6 41 80 CC 16 A6 78 7C A6 76 [binary data]

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/av ... x_homepage
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 64 1F 7B 00 03 14 E6 41 80 CC 16 A6 78 7C A6 76 [binary data]

IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://badoo.com/ [binary data]
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hotbar.com/search
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 64 1F 7B 00 03 14 E6 41 80 CC 16 A6 78 7C A6 76 [binary data]
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\URLSearchHook: {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search"
FF - prefs.js..browser.search.defaulturl: "http://www3.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.selectedEngine: "Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www3.iamwired.net/"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 44
FF - prefs.js..extensions.enabledItems: autopager@mozilla.org:0.6.0.20
FF - prefs.js..extensions.enabledItems: piclens@cooliris.com:1.11.6
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.2
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.3
FF - prefs.js..extensions.enabledItems: {37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.1
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5
FF - prefs.js..extensions.enabledItems: treestyletab@piro.sakura.ne.jp:0.8.2009122501
FF - prefs.js..extensions.enabledItems: {0b4ba5c3-4945-40d7-bd28-f1c6f98c415e}:1.0
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655
FF - prefs.js..extensions.enabledItems: {e4d0a527-ed76-404d-9731-26a498801779}:2.5.6.0
FF - prefs.js..extensions.enabledItems: {9CE11043-9A15-4207-A565-0C94C42D590D}:2.0
FF - prefs.js..extensions.enabledItems: {b1500ed7-68c4-4402-98ae-f57a7345dc09}:1.0
FF - prefs.js..extensions.enabledItems: {f3c12911-3343-c59a-8c82-74b377b2737f}:4.6.6.7

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/04/17 18:10:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/04/17 15:30:08 | 000,000,000 | ---D | M]

[2009/03/31 11:05:39 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Extensions
[2009/03/31 11:05:39 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2010/04/18 13:34:28 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions
[2010/03/10 06:06:24 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{0b4ba5c3-4945-40d7-bd28-f1c6f98c415e}
[2009/09/07 10:51:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/15 12:38:33 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009/10/25 10:43:24 | 000,000,000 | ---D | M] (PDF Download) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}
[2009/09/18 01:19:45 | 000,000,000 | ---D | M] (MyPlayCity Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
[2010/02/19 11:19:08 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/02/09 17:52:16 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}
[2010/03/31 17:15:07 | 000,000,000 | ---D | M] (XUL Cache) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{b1500ed7-68c4-4402-98ae-f57a7345dc09}
[2010/03/21 16:23:28 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/09/13 17:15:26 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/03/21 16:23:21 | 000,000,000 | ---D | M] (compliance 54328 Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{e4d0a527-ed76-404d-9731-26a498801779}
[2009/09/18 21:44:28 | 000,000,000 | ---D | M] (WeFi Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{ee1a404c-5714-451f-9365-a94936993d19}
[2010/02/09 17:52:28 | 000,000,000 | ---D | M] (FoxTab) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2009/10/25 10:43:02 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\anycolor.pavlos256@gmail.com
[2010/03/06 23:57:11 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\autopager@mozilla.org
[2009/09/30 13:55:30 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\OberonGameHost@OberonGames.com
[2010/02/09 17:52:34 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\piclens@cooliris.com
[2010/02/17 10:48:28 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\support@lastpass.com
[2010/03/29 01:48:12 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com
[2010/02/09 17:52:23 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\treestyletab@piro.sakura.ne.jp
[2009/06/23 18:38:24 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Sunbird\Profiles\6dct87k1.default\extensions
[2009/06/23 18:38:24 | 000,000,000 | ---D | M] (Sunbird (default)) -- C:\Users\USER\AppData\Roaming\mozilla\Sunbird\Profiles\6dct87k1.default\extensions\{8af2d0a7-e394-4de2-ae55-2dae532a7a9b}
[2010/02/13 15:36:54 | 000,002,650 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\bing.xml
[2009/01/15 06:58:20 | 000,000,882 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\conduit.xml
[2009/02/03 08:16:11 | 000,002,921 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\daemon-search.xml
[2010/04/15 12:36:35 | 000,000,261 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\Search.xml
[2010/04/18 13:34:28 | 000,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2008/12/12 19:02:02 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\mozilla firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/03/29 01:48:12 | 000,000,000 | ---D | M] (Firefox security) -- C:\Program Files\mozilla firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}
[2010/04/15 12:36:44 | 000,000,000 | ---D | M] (LoudMo Contextual Ad Assistant) -- C:\Program Files\mozilla firefox\extensions\{f3c12911-3343-c59a-8c82-74b377b2737f}
[2010/03/14 05:29:32 | 000,065,536 | ---- | M] (TODO: <Company name>) -- C:\Program Files\mozilla firefox\components\ffxShot.dll
[2009/04/07 14:52:04 | 000,028,672 | ---- | M] () -- C:\Program Files\mozilla firefox\components\GooglePlusVideosXPCOM.dll
[2009/08/09 17:14:12 | 000,049,152 | ---- | M] () -- C:\Program Files\mozilla firefox\components\SuperSearchXPCOM.dll
[2006/09/26 06:03:14 | 000,098,304 | ---- | M] (Zylom) -- C:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll
[2010/04/01 13:07:29 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2010/04/01 13:07:29 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/04/01 13:07:29 | 000,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2010/04/01 13:07:29 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2010/04/01 13:07:29 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {007B1F64-1403-41E6-80CC-16A6787CA676} - C:\Windows\System32\dhcpcsvc32.dll ()
O2 - BHO: (Google Plus) - {01677B4B-0610-4814-94A0-5F570DD7A88F} - C:\PROGRA~1\GOOGLE~1\17GOOG~1.DLL ()
O2 - BHO: (hotrevenue browser enhancer) - {01DF85E9-89E3-842D-01F6-5AAB21204324} - C:\Windows\System32\aknqvjjjggvqx.dll ()
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Super-Search -Find more of what you need) - {0286A85D-CD62-43bb-B7A9-A87D1D027160} - C:\PROGRA~1\EASYSE~1\BHO\12SUPE~1.DLL File not found
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (WeFiBar Toolbar) - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O2 - BHO: (ShoppingReport) - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O2 - BHO: (no name) - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - No CLSID value found.
O2 - BHO: (adShotHlpr Object) - {547366DF-BAD6-496C-97BA-95787132ECAD} - C:\Windows\System32\qjueplzs.dll ()
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (adHlpr Object) - {8BDA00C9-58A0-492D-A809-D57735C6EB21} - C:\Windows\System32\vldgpkus.dll ()
O2 - BHO: (installnetworkworld) - {9fdfa862-2f91-2879-66e0-53f0053076d5} - C:\Windows\System32\GV3r3A.dll ()
O2 - BHO: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (WeFiBar Toolbar) - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\Toolbar\WebBrowser: (WeFiBar Toolbar) - {0B876028-B388-4F6D-922F-F52FAEC8535F} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\Toolbar\WebBrowser: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Amazing3DAquariumWallpaper] File not found
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [ezLife] C:\Windows\System32\qjueplzs.dll ()
O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VistaADeck\HDAudioCPL.exe (VIA.)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [S3Trayp] C:\Windows\System32\s3trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [snpstd3] C:\Windows\vsnpstd3.exe ()
O4 - HKLM..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [zpkulydleetxdhle] C:\Windows\System32\aknqvjjjggvqx.dll ()
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team)
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [ccleaner] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [EleFunAnimatedWallpaper] File not found
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe File not found
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [RTHDBPL] C:\Users\USER\AppData\Roaming\SystemProc\lsass.exe ()
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe (SFX TEAM)
O4 - HKLM..\RunOnce: [NSSInstallation] C:\Program Files\DivX\Symantec\scstubinstaller.exe (Symantec Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [] File not found
O4 - HKU\S-1-5-18..\RunOnce: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [] File not found
O4 - HKU\S-1-5-20..\RunOnce: [] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 255
O7 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O9 - Extra Button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file:///C:/Windows/Java/classes/xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - AppInit_DLLs: (C:\Windows\System32\dpnet32.dll) - C:\Windows\System32\dpnet32.dll File not found
O20 - AppInit_DLLs: (C:\Windows\System32\dpnet32.dll) - C:\Windows\System32\dpnet32.dll File not found
O20 - AppInit_DLLs: (C:\Windows\System32\dimsroam32.dll) - C:\Windows\System32\dimsroam32.dll File not found
O20 - AppInit_DLLs: (C:\Windows\System32\dnssd32.dll) - C:\Windows\System32\dnssd32.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\30cf2dae509: DllName - C:\Windows\System32\dpnet32.dll - C:\Windows\System32\dpnet32.dll File not found
O24 - Desktop WallPaper: C:\Users\Public\Pictures\Sample Pictures\Autumn Leaves.jpg
O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\Sample Pictures\Autumn Leaves.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010/03/24 01:08:42 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- File not found
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk /r \??\F:) - File not found
O34 - HKLM BootExecute: (autocheck autochk /p \??\H:) - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2008/11/21 15:17:51 | 000,000,000 | ---D | M]
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

========== Files/Folders - Created Within 30 Days ==========

[2010/04/18 17:46:47 | 000,562,176 | ---- | C] (OldTimer Tools) -- C:\Users\USER\Desktop\OTL.exe
[2010/04/18 01:33:57 | 000,000,000 | ---D | C] -- C:\Users\USER\wel
[2010/04/17 20:40:53 | 000,000,000 | ---D | C] -- C:\Program Files\Laura Jones and the Gates of Good and Evil
[2010/04/17 20:29:12 | 000,000,000 | ---D | C] -- C:\Program Files\bfgclient
[2010/04/17 15:25:25 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2010/04/15 12:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\ShoppingReport
[2010/04/15 12:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Hotbar
[2010/04/14 13:38:41 | 000,000,000 | ---D | C] -- C:\$WINDOWS.~LS
[2010/04/14 13:37:39 | 000,000,000 | ---D | C] -- C:\$WINDOWS.~BT
[2010/04/11 14:48:51 | 000,000,000 | ---D | C] -- C:\Program Files\Smart-Ads-Solutions
[2010/04/11 14:48:47 | 000,000,000 | ---D | C] -- C:\Program Files\ezLife
[2010/03/30 21:58:24 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
[2010/03/29 01:14:06 | 000,000,000 | ---D | C] -- C:\Boot
[2010/03/25 15:15:26 | 000,000,000 | ---D | C] -- C:\Users\USER\Documents\Downloads
[2010/03/24 14:59:10 | 000,000,000 | ---D | C] -- C:\Users\USER\AppData\Local\AskToolbar
[2010/03/24 14:58:48 | 000,000,000 | ---D | C] -- C:\ProgramData\50154185
[2010/03/24 14:58:33 | 000,000,000 | -HSD | C] -- C:\Users\USER\AppData\Roaming\SystemProc
[2010/03/24 14:42:43 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com
[2010/03/24 01:08:42 | 000,000,000 | RHSD | C] -- C:\autorun.inf
[2010/03/22 09:03:09 | 000,000,000 | ---D | C] -- C:\Users\USER\AppData\Roaming\Malwarebytes
[2010/03/22 09:02:52 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/03/22 09:02:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/03/22 09:02:42 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/03/22 09:02:41 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/03/22 01:17:22 | 000,000,000 | ---D | C] -- C:\UsbFix
[2010/02/22 08:19:54 | 000,405,504 | ---- | C] (pion) -- C:\Users\USER\AppData\Local\jesgkg.exe
[2009/10/27 09:58:43 | 000,385,024 | ---- | C] (Rousseau) -- C:\Users\USER\AppData\Local\vvvvdfdl.exe
[2008/12/18 13:12:39 | 000,172,032 | ---- | C] ( ) -- C:\Windows\System32\rsnpstd3.dll
[2008/12/18 13:12:39 | 000,057,344 | ---- | C] ( ) -- C:\Windows\System32\vsnpstd3.dll
[2008/12/18 13:12:38 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\csnpstd3.dll
[2008/12/18 13:12:38 | 000,053,248 | ---- | C] ( ) -- C:\Windows\csnpstd3.dll
[5 C:\Users\USER\AppData\Roaming\*.tmp files -> C:\Users\USER\AppData\Roaming\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/04/18 17:57:01 | 006,291,456 | -HS- | M] () -- C:\Users\USER\ntuser.dat
[2010/04/18 17:55:55 | 000,001,356 | ---- | M] () -- C:\Users\USER\AppData\Local\d3d9caps.dat
[2010/04/18 17:55:43 | 000,108,768 | ---- | M] () -- C:\Users\USER\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/04/18 17:47:35 | 003,453,114 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2010/04/18 17:47:35 | 001,472,720 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/04/18 17:47:35 | 001,080,284 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2010/04/18 17:47:35 | 000,951,656 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/04/18 17:47:35 | 000,004,926 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/04/18 17:46:52 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Users\USER\Desktop\OTL.exe
[2010/04/18 02:35:32 | 000,008,012 | ---- | M] () -- C:\2187 - Pokemon - Version Emeraude (F).clt
[2010/04/18 00:44:56 | 000,021,840 | ---- | M] () -- C:\Windows\System32\SIntfNT.dll
[2010/04/18 00:44:56 | 000,017,212 | ---- | M] () -- C:\Windows\System32\SIntf32.dll
[2010/04/18 00:44:56 | 000,012,067 | ---- | M] () -- C:\Windows\System32\SIntf16.dll
[2010/04/17 20:41:08 | 000,001,990 | ---- | M] () -- C:\Users\Public\Desktop\Jouer à Laura Jones and the Gates of Good and Evil.lnk
[2010/04/17 20:41:08 | 000,001,250 | ---- | M] () -- C:\Users\Public\Desktop\Encore plus de jeux.lnk
[2010/04/17 20:29:13 | 000,001,700 | ---- | M] () -- C:\Users\Public\Desktop\Game Manager.lnk
[2010/04/17 19:46:58 | 000,048,272 | ---- | M] () -- C:\Windows\System32\wptzdgwraer.exe
[2010/04/17 15:30:15 | 000,001,393 | ---- | M] () -- C:\Users\USER\Desktop\DivX Movies.lnk
[2010/04/17 15:29:14 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2010/04/17 15:28:31 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2010/04/17 15:26:36 | 000,001,826 | ---- | M] () -- C:\Users\USER\Desktop\Install_NSS.lnk
[2010/04/17 15:26:36 | 000,000,362 | ---- | M] () -- C:\Windows\tasks\Install_NSS.job
[2010/04/15 12:51:46 | 000,001,724 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/04/15 12:36:45 | 000,111,789 | ---- | M] () -- C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe
[2010/04/15 06:47:06 | 000,387,584 | ---- | M] () -- C:\Windows\System32\_aknqvjjjggvqx.dll
[2010/04/15 05:57:07 | 000,158,208 | ---- | M] () -- C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/04/14 19:20:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/04/14 19:12:24 | 000,524,288 | -HS- | M] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2010/04/14 19:12:24 | 000,065,536 | -HS- | M] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TM.blf
[2010/04/14 18:10:00 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{334A4BE3-F41F-44AD-887E-AFD029110187}.job
[2010/04/14 18:10:00 | 000,000,400 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{000EE505-DF96-49B3-A96A-C4275A922361}.job
[2010/04/14 17:36:06 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/04/14 16:40:35 | 000,003,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/04/14 16:40:35 | 000,003,648 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/04/14 14:40:44 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/04/14 14:40:44 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/04/14 14:40:32 | 000,399,928 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/04/14 14:08:02 | 000,000,051 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest
[2010/04/14 14:07:39 | 000,002,039 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest
[2010/04/14 14:07:39 | 000,000,011 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest
[2010/04/14 14:07:39 | 000,000,011 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest
[2010/04/14 14:06:11 | 000,012,288 | ---- | M] () -- C:\Windows\System32\umstartup000.etl
[2010/04/14 14:04:28 | 000,001,905 | ---- | M] () -- C:\Windows\diagwrn.xml
[2010/04/14 14:04:28 | 000,001,905 | ---- | M] () -- C:\Windows\diagerr.xml
[2010/04/14 13:01:34 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010/04/13 17:13:12 | 001,331,200 | ---- | M] () -- C:\Windows\System32\GV3r3A.dll
[2010/03/30 21:58:24 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
[2010/03/30 21:58:04 | 002,083,312 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxsfs.dll
[2010/03/30 21:58:04 | 000,678,384 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\px.dll
[2010/03/30 21:58:04 | 000,559,600 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxdrv.dll
[2010/03/30 21:58:04 | 000,440,816 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxwave.dll
[2010/03/30 21:58:04 | 000,219,632 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxmas.dll
[2010/03/30 21:58:04 | 000,133,616 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxafs.dll
[2010/03/30 21:58:04 | 000,100,848 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\vxblock.dll
[2010/03/30 21:58:04 | 000,072,176 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxhpinst.exe
[2010/03/30 21:58:04 | 000,068,080 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxinsa64.exe
[2010/03/30 21:58:04 | 000,068,080 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxcpya64.exe
[2010/03/28 20:56:11 | 268,435,456 | -HS- | M] () -- C:\WinPEpge.sys
[2010/03/27 07:39:58 | 000,000,817 | ---- | M] () -- C:\ProgramData\818884014
[2010/03/26 15:28:46 | 000,000,729 | -HS- | M] () -- C:\ProgramData\1621065214
[2010/03/25 18:55:18 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dhcpcsvc32.dll
[2010/03/25 16:56:03 | 000,202,752 | ---- | M] () -- C:\Windows\System32\fdBthProxy32.dll
[2010/03/25 15:56:13 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dbnmpntw32.dll
[2010/03/25 15:26:50 | 000,003,734 | ---- | M] () -- C:\Windows\GnuHashes.ini
[2010/03/25 01:50:01 | 268,435,456 | -HS- | M] () -- C:\WinPEpge(333).sys
[2010/03/24 16:58:41 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dwmapi32.dll
[2010/03/24 15:58:41 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dtsh32.dll
[2010/03/24 14:58:48 | 000,203,776 | -HS- | M] () -- C:\ProgramData\unrar.exe
[2010/03/24 14:58:31 | 000,110,080 | ---- | M] () -- C:\Windows\System32\dplayx32.dll
[2010/03/24 14:58:29 | 000,203,264 | ---- | M] () -- C:\Windows\System32\dot3gpclnt32.dll
[2010/03/24 14:58:27 | 000,116,736 | ---- | M] () -- C:\Windows\System32\dnssd32.dll
[2010/03/24 14:41:03 | 000,001,700 | ---- | M] () -- C:\Users\USER\Desktop\LimeWire 5.5.7.lnk
[2010/03/24 01:09:45 | 000,005,982 | ---- | M] () -- C:\UsbFix_Upload_Me_PC-de-USER.zip
[2010/03/22 09:02:57 | 000,000,818 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/20 07:54:15 | 000,000,017 | ---- | M] () -- C:\Windows\System32\package.lst
[5 C:\Users\USER\AppData\Roaming\*.tmp files -> C:\Users\USER\AppData\Roaming\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/04/17 20:41:08 | 000,001,990 | ---- | C] () -- C:\Users\Public\Desktop\Jouer à Laura Jones and the Gates of Good and Evil.lnk
[2010/04/17 20:29:13 | 000,001,700 | ---- | C] () -- C:\Users\Public\Desktop\Game Manager.lnk
[2010/04/17 20:29:12 | 000,001,250 | ---- | C] () -- C:\Users\Public\Desktop\Encore plus de jeux.lnk
[2010/04/17 15:30:15 | 000,001,393 | ---- | C] () -- C:\Users\USER\Desktop\DivX Movies.lnk
[2010/04/17 15:29:14 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2010/04/17 15:28:31 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2010/04/17 15:26:36 | 000,001,826 | ---- | C] () -- C:\Users\USER\Desktop\Install_NSS.lnk
[2010/04/17 15:26:36 | 000,000,362 | ---- | C] () -- C:\Windows\tasks\Install_NSS.job
[2010/04/15 16:18:27 | 000,008,012 | ---- | C] () -- C:\2187 - Pokemon - Version Emeraude (F).clt
[2010/04/15 12:36:45 | 000,111,789 | ---- | C] () -- C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe
[2010/04/14 14:06:11 | 000,012,288 | ---- | C] () -- C:\Windows\System32\umstartup000.etl
[2010/04/14 12:46:28 | 000,000,400 | -H-- | C] () -- C:\Windows\tasks\User_Feed_Synchronization-{000EE505-DF96-49B3-A96A-C4275A922361}.job
[2010/04/13 17:13:12 | 001,331,200 | ---- | C] () -- C:\Windows\System32\GV3r3A.dll
[2010/04/11 14:48:50 | 000,048,272 | ---- | C] () -- C:\Windows\System32\wptzdgwraer.exe
[2010/03/25 18:55:18 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dhcpcsvc32.dll
[2010/03/25 16:55:57 | 000,202,752 | ---- | C] () -- C:\Windows\System32\fdBthProxy32.dll
[2010/03/25 15:56:12 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dbnmpntw32.dll
[2010/03/25 00:06:43 | 268,435,456 | -HS- | C] () -- C:\WinPEpge.sys
[2010/03/25 00:06:43 | 268,435,456 | -HS- | C] () -- C:\WinPEpge(333).sys
[2010/03/24 16:58:41 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dwmapi32.dll
[2010/03/24 15:58:40 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dtsh32.dll
[2010/03/24 15:06:25 | 000,003,734 | ---- | C] () -- C:\Windows\GnuHashes.ini
[2010/03/24 14:58:48 | 000,203,776 | -HS- | C] () -- C:\ProgramData\unrar.exe
[2010/03/24 14:58:31 | 000,110,080 | ---- | C] () -- C:\Windows\System32\dplayx32.dll
[2010/03/24 14:58:29 | 000,203,264 | ---- | C] () -- C:\Windows\System32\dot3gpclnt32.dll
[2010/03/24 14:58:27 | 000,116,736 | ---- | C] () -- C:\Windows\System32\dnssd32.dll
[2010/03/24 14:58:27 | 000,002,039 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest
[2010/03/24 14:58:27 | 000,000,051 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest
[2010/03/24 14:58:27 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest
[2010/03/24 14:58:27 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest
[2010/03/24 14:41:03 | 000,001,700 | ---- | C] () -- C:\Users\USER\Desktop\LimeWire 5.5.7.lnk
[2010/03/24 01:09:44 | 000,005,982 | ---- | C] () -- C:\UsbFix_Upload_Me_PC-de-USER.zip
[2010/03/22 12:33:11 | 734,373,888 | ---- | C] () -- C:\Users\USER\Desktop\The Clone Wars.avi
[2010/03/22 09:02:57 | 000,000,818 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/17 09:08:08 | 000,496,640 | ---- | C] () -- C:\Windows\System32\aknqvjjjggvqx.dll
[2010/03/17 09:08:08 | 000,387,584 | ---- | C] () -- C:\Windows\System32\_aknqvjjjggvqx.dll
[2010/03/14 05:29:42 | 000,297,984 | ---- | C] () -- C:\Windows\System32\vldgpkus.dll
[2010/03/14 05:29:14 | 000,315,392 | ---- | C] () -- C:\Windows\System32\qjueplzs.dll
[2010/03/11 22:30:17 | 000,393,216 | ---- | C] () -- C:\Users\USER\AppData\Local\ldcri.exe
[2010/03/11 10:55:21 | 000,524,288 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms
[2010/03/11 10:55:19 | 000,524,288 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2010/03/11 10:55:17 | 000,065,536 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TM.blf
[2010/03/09 20:02:44 | 000,000,729 | -HS- | C] () -- C:\ProgramData\1621065214
[2010/03/09 20:02:43 | 000,000,817 | ---- | C] () -- C:\ProgramData\818884014
[2010/03/09 20:00:41 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b78fe37
[2010/03/06 02:03:05 | 000,000,050 | ---- | C] () -- C:\Windows\MegaManager.INI
[2010/03/05 16:13:04 | 000,446,464 | ---- | C] () -- C:\Users\USER\AppData\Local\aouicbw.exe
[2010/02/27 10:22:56 | 000,339,968 | ---- | C] () -- C:\Users\USER\AppData\Local\ieokfhd.exe
[2010/02/08 18:40:19 | 010,605,056 | ---- | C] () -- C:\Users\USER\Hygrothermique.ppt
[2010/02/01 21:32:20 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Roaming\wklnhst.dat
[2010/01/14 11:38:28 | 000,000,552 | ---- | C] () -- C:\Users\USER\AppData\Local\d3d8caps.dat
[2010/01/09 09:22:08 | 000,001,372 | ---- | C] () -- C:\Users\USER\AppData\Roaming\N1PqRpBz8wDw3Sk.vbs
[2009/10/19 15:09:10 | 000,005,609 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687C.manifest
[2009/10/19 15:09:10 | 000,002,381 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687P.manifest
[2009/10/19 15:09:10 | 000,000,079 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687O.manifest
[2009/10/19 15:09:10 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687S.manifest
[2009/09/30 11:28:11 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Local\oeuky_s2m.zl
[2009/09/30 10:08:42 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/09/14 21:54:25 | 000,005,609 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669C.manifest
[2009/09/14 21:54:25 | 000,002,493 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669P.manifest
[2009/09/14 21:54:25 | 000,000,352 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669O.manifest
[2009/09/14 21:54:25 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669S.manifest
[2009/09/04 22:50:25 | 000,000,008 | ---- | C] () -- C:\Users\USER\AppData\Local\.mpid
[2009/09/04 18:54:38 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms
[2009/09/04 18:54:38 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2009/09/04 18:54:37 | 000,262,144 | ---- | C] () -- C:\ProgramData\ntuser.dat
[2009/09/04 18:54:37 | 000,065,536 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TM.blf
[2009/09/04 18:54:37 | 000,005,120 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG1
[2009/09/04 18:54:37 | 000,000,000 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG2
[2009/08/18 09:05:34 | 000,000,040 | ---- | C] () -- C:\Windows\NAVIGMA.INI
[2009/08/13 17:59:50 | 000,021,504 | ---- | C] () -- C:\Users\USER\AppData\Roaming\CDRusersDB.v12
[2009/08/04 07:20:06 | 000,000,026 | ---- | C] () -- C:\Windows\System32\satsukidecodersettings.ini
[2009/07/15 21:05:17 | 000,524,288 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{c1d5ff02-7158-11de-a6d0-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms
[2009/07/15 21:05:17 | 000,524,288 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{c1d5ff02-7158-11de-a6d0-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2009/07/15 21:05:17 | 000,065,536 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{c1d5ff02-7158-11de-a6d0-00a0d1c76a7e}.TM.blf
[2009/05/04 18:45:56 | 000,005,740 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef583C.manifest
[2009/05/04 18:45:56 | 000,001,517 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef583P.manifest
[2009/05/04 18:45:56 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef583S.manifest
[2009/05/04 18:45:56 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef583O.manifest
[2009/02/03 08:05:01 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009/01/15 08:59:55 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/01/12 12:49:07 | 000,000,090 | ---- | C] () -- C:\Users\USER\AppData\Local\novwdg.bat
[2008/12/19 01:41:13 | 000,001,064 | ---- | C] () -- C:\Windows\Sol.ini
[2008/12/19 01:41:12 | 000,000,982 | ---- | C] () -- C:\Windows\Fa.ini
[2008/12/18 13:12:41 | 000,015,498 | ---- | C] () -- C:\Windows\snpstd3.ini
[2008/12/05 17:18:42 | 000,315,408 | ---- | C] () -- C:\ProgramData\ElseFaceFace.geoscy
[2008/12/05 16:56:33 | 000,090,128 | ---- | C] () -- C:\ProgramData\ElseFaceFace.cjf3uy5
[2008/12/05 16:33:38 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jgdllq
[2008/12/05 16:10:34 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ouqiwk
[2008/12/05 15:48:21 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8hjzj
[2008/12/05 15:26:17 | 000,004,112 | ---- | C] () -- C:\ProgramData\ElseFaceFace.yvpoe7
[2008/12/05 15:04:20 | 000,393,232 | ---- | C] () -- C:\ProgramData\ElseFaceFace.73yav
[2008/12/05 14:42:17 | 000,192,528 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fjeg2f
[2008/12/05 14:20:14 | 000,393,232 | ---- | C] () -- C:\ProgramData\ElseFaceFace.zu7pp
[2008/12/05 13:58:15 | 000,249,872 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6gnj9v3
[2008/12/05 13:36:21 | 000,061,456 | ---- | C] () -- C:\ProgramData\ElseFaceFace.s8vflzc
[2008/12/05 13:14:28 | 000,213,008 | ---- | C] () -- C:\ProgramData\ElseFaceFace.bn5c9g
[2008/12/05 12:52:32 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.gh5gi
[2008/12/05 12:30:37 | 000,147,472 | ---- | C] () -- C:\ProgramData\ElseFaceFace.54tnnl
[2008/12/05 12:08:45 | 000,368,656 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mg3c28
[2008/12/05 11:46:53 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3xoye
[2008/12/05 11:25:00 | 000,229,392 | ---- | C] () -- C:\ProgramData\ElseFaceFace.z9ev4
[2008/12/05 11:03:07 | 000,159,760 | ---- | C] () -- C:\ProgramData\ElseFaceFace.dpse74h
[2008/12/05 10:41:14 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6dtvy83
[2008/12/05 10:19:18 | 000,311,312 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2gd30l
[2008/12/05 09:57:22 | 000,237,584 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jhd9zk
[2008/12/05 09:35:21 | 000,139,280 | ---- | C] () -- C:\ProgramData\ElseFaceFace.c62gi
[2008/12/05 09:13:03 | 000,102,416 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ekehpb
[2008/12/05 08:50:43 | 000,282,640 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jyh6j
[2008/12/05 08:28:39 | 000,192,528 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ygzcx
[2008/12/05 08:06:40 | 000,319,504 | ---- | C] () -- C:\ProgramData\ElseFaceFace.nu9isun
[2008/12/05 07:44:33 | 000,065,552 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tnykn
[2008/12/05 07:22:31 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.zmtdh
[2008/12/05 07:00:33 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lmj6he
[2008/12/05 06:38:34 | 000,245,776 | ---- | C] () -- C:\ProgramData\ElseFaceFace.305fb9
[2008/12/05 06:16:31 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9lkggq
[2008/12/05 05:54:37 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ocuufh
[2008/12/05 05:32:29 | 000,352,272 | ---- | C] () -- C:\ProgramData\ElseFaceFace.wyfhbp
[2008/12/05 05:10:29 | 000,159,760 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mva3r
[2008/12/05 04:48:26 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mzjbosq
[2008/12/05 04:26:34 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.eun5iv
[2008/12/05 04:04:41 | 000,163,856 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0cn2xi7
[2008/12/05 03:42:48 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hq4qq1
[2008/12/05 03:20:56 | 000,143,376 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ampj4c
[2008/12/05 02:59:03 | 000,040,976 | ---- | C] () -- C:\ProgramData\ElseFaceFace.eghqwo
[2008/12/05 02:37:11 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9fw58
[2008/12/05 02:15:18 | 000,049,168 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3w1e9
[2008/12/05 01:53:26 | 000,294,928 | ---- | C] () -- C:\ProgramData\ElseFaceFace.b38f1
[2008/12/05 01:31:34 | 000,299,024 | ---- | C] () -- C:\ProgramData\ElseFaceFace.r2tjb
[2008/12/05 01:09:41 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.cd9wj77
[2008/12/05 00:47:42 | 000,032,784 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lpz00
[2008/12/05 00:25:46 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6pail
[2008/12/04 21:52:47 | 000,335,888 | ---- | C] () -- C:\ProgramData\ElseFaceFace.slp9sni
[2008/12/04 21:30:31 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3r0ysb3
[2008/12/04 21:08:37 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.t3q7xv
[2008/12/04 20:46:44 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.67je0
[2008/12/04 20:24:33 | 000,032,784 | ---- | C] () -- C:\ProgramData\ElseFaceFace.l3qcor
[2008/12/04 20:02:37 | 000,311,312 | ---- | C] () -- C:\ProgramData\ElseFaceFace.16unasi
[2008/12/04 19:40:32 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.w7n3esr
[2008/12/04 19:16:49 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.38d8dt
[2008/12/04 18:54:09 | 000,094,224 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ex40kap
[2008/12/04 18:31:23 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.j1nkqe
[2008/12/04 18:08:57 | 000,225,296 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2m4zh2z
[2008/12/04 17:46:53 | 000,352,272 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tn2qi
[2008/12/04 17:24:49 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.kl2p4o
[2008/12/04 17:24:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8ae53219b1eed16
[2008/12/04 17:24:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a4aa909277f05902
[2008/12/04 17:24:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\63748b7d2b6a3a01
[2008/12/04 17:24:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c27cbd49e0593881
[2008/12/04 17:23:58 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bfc7de68dd119e54
[2008/12/04 17:23:53 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dee3fc7f8527d0b
[2008/12/04 17:23:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ac981666fc7e19ba
[2008/12/04 17:23:43 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\23f24f37844e129
[2008/12/04 17:23:38 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\455684d9ac97afeb
[2008/12/04 17:23:33 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e72946d2b6e66723
[2008/12/04 17:23:28 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b28d1a6893f522a3
[2008/12/04 17:23:23 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a6eef0b317873ff
[2008/12/04 17:23:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4a583c3f18ce7599
[2008/12/04 17:23:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ffdb1fd48f6810b8
[2008/12/04 17:23:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f7cc7c04fec9228
[2008/12/04 17:23:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\66eb6ca31a0ecea0
[2008/12/04 17:22:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5de7b8c4db83779f
[2008/12/04 17:22:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94119a4d861604b9
[2008/12/04 17:22:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\439f3b1b58212554
[2008/12/04 17:22:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d3078ffd7892197
[2008/12/04 17:22:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7943c4a2493487d6
[2008/12/04 17:22:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16e9455483666708
[2008/12/04 17:22:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3a99cce6c8ba595d
[2008/12/04 17:22:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a246c9722939aaa0
[2008/12/04 17:22:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\541677ea5c785984
[2008/12/04 17:22:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\443ca76a215599c6
[2008/12/04 17:22:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4dfb11e78b364215
[2008/12/04 17:22:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e57516d26016ae5d
[2008/12/04 17:21:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\85b7dcfbae225d42
[2008/12/04 17:21:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e304b69479921f1f
[2008/12/04 17:21:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8045f51617523ce1
[2008/12/04 17:02:47 | 000,057,360 | ---- | C] () -- C:\ProgramData\ElseFaceFace.g7b8ww
[2008/12/04 16:40:38 | 000,258,064 | ---- | C] () -- C:\ProgramData\ElseFaceFace.pm4kwy
[2008/12/04 16:18:39 | 000,008,208 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tmh4kgs
[2008/12/04 15:56:38 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8ewfdrw
[2008/12/04 15:34:27 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.vhsc3sx
[2008/12/04 15:12:23 | 000,040,976 | ---- | C] () -- C:\ProgramData\ElseFaceFace.494hg
[2008/12/04 14:50:26 | 000,094,224 | ---- | C] () -- C:\ProgramData\ElseFaceFace.oxhuah
[2008/12/04 14:28:29 | 000,233,488 | ---- | C] () -- C:\ProgramData\ElseFaceFace.82cou
[2008/12/04 14:06:33 | 000,397,328 | ---- | C] () -- C:\ProgramData\ElseFaceFace.o3860
[2008/12/04 13:44:36 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tl69au
[2008/12/04 13:22:38 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tucoj
[2008/12/04 13:00:43 | 000,221,200 | ---- | C] () -- C:\ProgramData\ElseFaceFace.071ko1v
[2008/12/04 12:38:39 | 000,335,888 | ---- | C] () -- C:\ProgramData\ElseFaceFace.nm3hcby
[2008/12/04 12:16:37 | 000,274,448 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8qvu0u
[2008/12/04 11:54:25 | 000,208,912 | ---- | C] () -- C:\ProgramData\ElseFaceFace.t9r3l
[2008/12/04 11:32:04 | 000,385,040 | ---- | C] () -- C:\ProgramData\ElseFaceFace.juwb1
[2008/12/04 11:10:03 | 000,299,024 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8e2vuob
[2008/12/04 10:48:05 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.r27p4q0
[2008/12/04 10:26:01 | 000,253,968 | ---- | C] () -- C:\ProgramData\ElseFaceFace.m1llv
[2008/12/04 10:04:02 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ae6fi
[2008/12/04 09:42:01 | 000,069,648 | ---- | C] () -- C:\ProgramData\ElseFaceFace.bw6h00s
[2008/12/04 09:13:55 | 000,086,032 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fruljw
[2008/12/04 08:51:46 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.plee9
[2008/12/04 08:29:41 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.l2u6jl
[2008/12/04 08:07:39 | 000,024,592 | ---- | C] () -- C:\ProgramData\ElseFaceFace.k77sj5q
[2008/12/04 07:45:35 | 000,389,136 | ---- | C] () -- C:\ProgramData\ElseFaceFace.alxcn
[2008/12/04 07:23:37 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.m74ic
[2008/12/04 07:01:38 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.erx5p
[2008/12/04 06:39:39 | 000,098,320 | ---- | C] () -- C:\ProgramData\ElseFaceFace.luj5g1
[2008/12/04 06:16:08 | 000,278,544 | ---- | C] () -- C:\ProgramData\ElseFaceFace.874lwiq
[2008/12/04 05:54:02 | 000,102,416 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ui51j
[2008/12/04 05:32:05 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.sdiotm
[2008/12/04 05:09:57 | 000,118,800 | ---- | C] () -- C:\ProgramData\ElseFaceFace.n7d8tx
[2008/12/04 04:47:57 | 000,143,376 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8i9x2
[2008/12/04 04:26:00 | 000,405,520 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fzpzeax
[2008/12/04 04:04:04 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mkh1f
[2008/12/04 03:42:02 | 000,188,432 | ---- | C] () -- C:\ProgramData\ElseFaceFace.f0e9x0
[2008/12/04 03:20:07 | 000,151,568 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2vr4n
[2008/12/04 02:58:14 | 000,020,496 | ---- | C] () -- C:\ProgramData\ElseFaceFace.h0oetim
[2008/12/04 02:36:21 | 000,348,176 | ---- | C] () -- C:\ProgramData\ElseFaceFace.wtojhw
[2008/12/04 02:14:28 | 000,278,544 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ggd5eoa
[2008/12/04 01:52:35 | 000,258,064 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0k627
[2008/12/04 01:30:42 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lr3vvf
[2008/12/04 01:08:48 | 000,135,184 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9x55bs8
[2008/12/04 00:46:47 | 000,270,352 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3njq9o
[2008/12/04 00:24:48 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.dwumvs
[2008/12/03 21:39:10 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mhkyiq
[2008/12/03 21:17:15 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0ih1k
[2008/12/03 20:55:20 | 000,376,848 | ---- | C] () -- C:\ProgramData\ElseFaceFace.swi6c36
[2008/12/03 20:33:21 | 000,028,688 | ---- | C] () -- C:\ProgramData\ElseFaceFace.q2d51
[2008/12/03 20:11:18 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ungi4sq
[2008/12/03 19:49:19 | 000,249,872 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8j6qcu7
[2008/12/03 19:27:24 | 000,327,696 | ---- | C] () -- C:\ProgramData\ElseFaceFace.vqbt7t
[2008/12/03 19:05:28 | 000,106,512 | ---- | C] () -- C:\ProgramData\ElseFaceFace.h97oi6r
[2008/12/03 18:43:17 | 000,241,680 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ugqyij
[2008/12/03 18:21:23 | 000,000,016 | ---- | C] () -- C:\ProgramData\ElseFaceFace.afu6yv
[2008/12/03 17:59:28 | 000,294,928 | ---- | C] () -- C:\ProgramData\ElseFaceFace.g8wfama
[2008/12/03 17:37:30 | 000,069,648 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ac2pf
[2008/12/03 17:15:28 | 000,057,360 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3cdvf
[2008/12/03 16:53:26 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8li6a
[2008/12/03 16:45:41 | 000,213,008 | ---- | C] () -- C:\ProgramData\axis enc body.33qk5id
[2008/12/03 16:44:42 | 000,348,176 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ou7pqvr
[2008/12/03 16:44:41 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.yuwwwcy
[2008/12/03 16:31:24 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.qjqvqw7
[2008/12/03 16:09:09 | 000,270,352 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hzwsn
[2008/12/03 15:46:54 | 000,004,112 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hyzys
[2008/12/01 22:36:43 | 000,114,704 | ---- | C] () -- C:\ProgramData\ElseFaceFace.gfkel2
[2008/12/01 15:04:54 | 000,077,840 | ---- | C] () -- C:\ProgramData\ElseFaceFace.quf5j
[2008/12/01 14:43:49 | 000,225,296 | ---- | C] () -- C:\ProgramData\ElseFaceFace.sc6ot
[2008/12/01 14:23:56 | 000,356,368 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ta82lbe
[2008/12/01 14:00:45 | 000,118,800 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ud08hjx
[2008/12/01 11:20:09 | 000,000,079 | ---- | C] () -- C:\Windows\few-oneclick-repertoire.ini
[2008/12/01 11:19:57 | 000,000,079 | ---- | C] () -- C:\Windows\few-repertoire-1024.ini
[2008/11/30 22:23:06 | 000,058,792 | ---- | C] () -- C:\Windows\System32\wbload.dll
[2008/11/29 14:05:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\81000b0a3e1b5479
[2008/11/29 14:05:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c8a308c8296a230
[2008/11/29 14:04:28 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5e723a73a4a5025a
[2008/11/29 14:04:23 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cdbc80166fcf9641
[2008/11/29 14:04:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b3e1f6b621bde6cc
[2008/11/29 14:04:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d77870e5cfb5237
[2008/11/29 14:04:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\62cc9819fd6ccc1f
[2008/11/29 14:04:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9153140e6cf778ee
[2008/11/29 14:03:58 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7e38d3a28d2da224
[2008/11/29 14:03:53 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\226fdc4c43913361
[2008/11/29 14:03:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a8bbb26068d04ec4
[2008/11/29 14:03:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7147d737a238a936
[2008/11/29 14:03:33 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a8f3b8552939c9ef
[2008/11/29 14:03:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\96736d621498270f
[2008/11/29 14:03:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5cab63de464afef0
[2008/11/29 14:03:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d6d30338c05225f
[2008/11/29 14:03:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2f63163b8f715a4f
[2008/11/29 14:03:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9d7b3eb5b513024
[2008/11/29 14:03:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ca570e929b61843a
[2008/11/29 14:03:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bd04fc2999f797a2
[2008/11/29 13:53:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f96f47983ea947c7
[2008/11/29 13:53:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\607383dbccb59b2e
[2008/11/29 13:53:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fef12f37dcb948ad
[2008/11/29 13:53:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\40223987c0cebab7
[2008/11/29 13:53:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d3b7710c893b3306
[2008/11/29 13:53:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95d5a7cb9a6e79c5
[2008/11/29 13:53:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b30c98a2ff27c30e
[2008/11/29 13:52:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c6ae86324a061b1
[2008/11/29 13:52:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a155e66e3aab6ad9
[2008/11/29 13:52:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d3f427fa42be82f3
[2008/11/29 13:52:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6e4b6a442fe0e193
[2008/11/29 13:52:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e3036fbf5aae0bfe
[2008/11/29 13:49:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d4213771cb3525c1
[2008/11/29 13:48:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a3346eda4b0cfd4
[2008/11/29 13:48:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c7b35d06af4bfb8d
[2008/11/29 13:48:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\831b208a88e93360
[2008/11/29 13:48:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a985ccb733c25101
[2008/11/29 13:48:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2bfae833c7fc1064
[2008/11/29 13:48:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\37213bd7aaad2c35
[2008/11/29 13:48:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\41f8481da531d0be
[2008/11/29 13:48:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\28aa687f8110de6
[2008/11/29 13:48:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2bd50dd748c183a5
[2008/11/29 13:48:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6711ecaa1d825f6b
[2008/11/29 13:48:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\efdb813b65a9cee4
[2008/11/29 13:47:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d1f34e9ecd359e21
[2008/11/29 13:47:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f58978b65c6d65cc
[2008/11/29 13:47:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4bb18495e17576b3
[2008/11/29 13:47:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\87fb543eb0412b5
[2008/11/29 13:47:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f8668ca0a9e1d131
[2008/11/29 13:47:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dd8e81e4fedb3430
[2008/11/29 13:47:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64d7ccaa8130fb5f
[2008/11/29 13:47:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5997e9adac5f0635
[2008/11/29 13:47:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e9a66a88bf33f0
[2008/11/29 13:47:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d4c55b0d4dc57b8e
[2008/11/29 13:47:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df14af5f167b0200
[2008/11/29 13:47:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9719e94dd2b95c9
[2008/11/29 13:46:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\40fb8eaf21bf5131
[2008/11/29 13:46:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4365ceb689db76b7
[2008/11/29 13:46:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d7dc1d79cc6c3732
[2008/11/29 13:46:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f05a3654f9bf3d9
[2008/11/29 13:44:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e15c94812b106eb
[2008/11/29 13:44:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c85b04e14f0a4258
[2008/11/29 13:44:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9ce5d3e945f7d2e
[2008/11/29 13:44:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f20c5eb8c3a40b
[2008/11/29 13:44:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9b62ee65d0d84035
[2008/11/29 13:44:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e1bffeedd341166
[2008/11/29 13:43:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a12bbe72ff31b169
[2008/11/29 13:43:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e6ed99d7dffe300c
[2008/11/29 13:43:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df2be60059e8dfd8
[2008/11/29 13:43:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\afd7c747f81f9f23
[2008/11/29 13:43:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\70042177892a4e9c
[2008/11/29 13:43:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\30917d2e58b7327a
[2008/11/29 13:43:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\42be9fd7c4471cf9
[2008/11/29 13:43:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\158f3657a04ab2e
[2008/11/29 13:43:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a963a81567f2b7ed
[2008/11/29 13:43:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a71eb07adcdf08b2
[2008/11/29 13:43:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\49a8d5c820219a19
[2008/11/29 13:42:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f3cb3f74c1f9f76
[2008/11/29 13:42:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a9d6154efe318fb0
[2008/11/29 13:42:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c034723b90e4e009
[2008/11/29 13:42:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5426b210899405e5
[2008/11/29 13:42:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e0780f17c0291bb
[2008/11/29 13:42:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b00c9f79c33a1b63
[2008/11/29 13:42:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6ae4f97c1c97afe6
[2008/11/29 13:42:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5cd6e9d637cd1fcb
[2008/11/29 13:42:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f3717a7a2dca1b40
[2008/11/29 13:42:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\932c8bbeb7795c87
[2008/11/29 13:42:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\496defadf08ee227
[2008/11/29 13:41:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c7245dc4af2a06bd
[2008/11/29 13:41:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c19731da185601a2
[2008/11/29 13:41:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bc9b86c370399662
[2008/11/29 13:41:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9002cb1dcf613c87
[2008/11/29 13:41:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\32b98aa5c4ceb68d
[2008/11/29 13:41:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df2a491171043ae0
[2008/11/29 13:41:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f526c83cf511cb6b
[2008/11/29 13:41:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\eddeaaeb754dcbfa
[2008/11/29 13:41:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e213366115a84aa9
[2008/11/29 13:41:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b0999dcac3a66073
[2008/11/29 13:41:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64f8c16ecdd270f4
[2008/11/29 13:41:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c57445598e43466c
[2008/11/29 13:40:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95111046d0d304c1
[2008/11/29 13:40:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7962a6edb2f537ad
[2008/11/29 13:40:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\632fc5dd2e07218d
[2008/11/29 13:39:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d0de657e686e3b43
[2008/11/29 13:39:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\84bdac14aba299e
[2008/11/29 13:39:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3fde5be5c3ce6b1b
[2008/11/29 13:39:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6c08d988874a2200
[2008/11/29 13:38:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9f3e768bbe9b067e
[2008/11/29 13:38:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\84949b0d1d3b5d5
[2008/11/29 13:38:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94803ae16c7d076f
[2008/11/29 13:38:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\693bdb6f4a5603f6
[2008/11/29 13:38:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bbd6c33be8bcb4f9
[2008/11/29 13:38:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a45e1bcab32bf3a2
[2008/11/29 13:38:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7829c672969947cd
[2008/11/29 13:38:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c672d4a2d1edcc74
[2008/11/29 13:38:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ec94ab6994cdef5d
[2008/11/29 13:38:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\19b75171f4a946d1
[2008/11/29 13:38:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9fa1368a991a610
[2008/11/29 13:38:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\25f30a79d9ea960e
[2008/11/29 13:37:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cf9e147692b5a229
[2008/11/29 13:37:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\82ccbe49fdc23519
[2008/11/29 13:37:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\571d64ffa12ad06d
[2008/11/29 13:37:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16f9263f268ad3df
[2008/11/29 13:37:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\997abb3a2234a6c9
[2008/11/29 13:37:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\678326e9af28a6d1
[2008/11/29 13:37:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64b765d6d79b199
[2008/11/29 13:37:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e6afa1a3323b86
[2008/11/29 13:37:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f8d03d2ff70c096
[2008/11/29 13:37:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b57910d21bd9eb35
[2008/11/29 13:37:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64e6c896722a582e
[2008/11/29 13:36:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c60ac4f7b2a8d72
[2008/11/29 13:36:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\97a429078c9f418b
[2008/11/29 13:36:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\eb1cab14f460f9ce
[2008/11/29 13:35:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\de3dc8b97df2db20
[2008/11/29 13:34:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ee99a63c590d75a
[2008/11/29 13:34:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e304e64ba36b9540
[2008/11/29 13:34:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b11e149124a34b5
[2008/11/29 13:34:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1342a7ee9dc2c00
[2008/11/29 13:34:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5d6eb93719638f21
[2008/11/29 13:34:37 | 000,001,006 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509C.manifest
[2008/11/29 13:34:37 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509S.manifest
[2008/11/29 13:34:37 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509O.manifest
[2008/11/29 13:34:36 | 000,000,799 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509P.manifest
[2008/11/29 13:34:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5709554123b2b5db
[2008/11/29 13:34:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\71b937d425f041ba
[2008/11/29 13:34:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b09baf3d1431dba
[2008/11/29 13:34:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fd712e7f41b73f4e
[2008/11/29 13:34:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8f1cf5fa567a5bb9
[2008/11/29 13:34:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c748aa5094abe140
[2008/11/29 13:34:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c9405b3dd4f2e16e
[2008/11/29 13:33:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\211c25d295e34c41
[2008/11/29 13:33:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c02aff622a077c93
[2008/11/29 13:33:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\90f807bed1ff3633
[2008/11/29 13:33:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5c7bf7bbc2922c81
[2008/11/29 13:33:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f0bba271186ba3a4
[2008/11/29 13:33:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b350ecfe33fe942d
[2008/11/29 13:33:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\183124fab7d6d386
[2008/11/29 13:33:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\55326966926e809
[2008/11/29 13:33:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\607560457b2a79b7
[2008/11/29 13:33:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a3028b173f84abfa
[2008/11/29 13:33:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\71c948d57de9c1da
[2008/11/29 13:33:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95615a1c50af2930
[2008/11/29 13:32:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\97bee691cb88c40d
[2008/11/29 13:32:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\90f61ffa2ab46973
[2008/11/29 13:32:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1654dfd01562b4bb
[2008/11/29 13:32:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\22a055e54fad2234
[2008/11/29 13:32:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c065a6fd3e0101a1
[2008/11/29 13:32:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\514637d29895303e
[2008/11/29 13:32:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ad75888fb368abf0
[2008/11/29 13:31:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c3ac91a8d3c5c67
[2008/11/29 13:31:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ce9a8fd21a5f866
[2008/11/29 13:31:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\81666ab8e8ccfdfc
[2008/11/29 13:31:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c8e0576a1ce41d9
[2008/11/29 13:31:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\202a4b489b915b6f
[2008/11/29 13:31:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2f2b2927f3cd0d63
[2008/11/29 13:31:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\34afa5d0b6134931
[2008/11/29 13:31:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b0c2283a4670d4c
[2008/11/29 13:31:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ea9ca2ac1c5be192
[2008/11/29 13:31:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4148a5cbafa84866
[2008/11/29 13:31:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5a2cb362f4ee318c
[2008/11/29 13:31:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7bdbf60e9b94c076
[2008/11/29 13:30:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\249e8293eb0d7fbf
[2008/11/29 13:30:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\51955b9dd2a0b97c
[2008/11/29 13:30:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\851bbfbfc58b4b2
[2008/11/29 13:30:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b92aec11e808ad45
[2008/11/29 13:30:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a59af8adc1732d53
[2008/11/29 13:30:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d69ed4cc597d32e
[2008/11/29 13:30:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a14e10aab9c12130
[2008/11/29 13:30:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e950b70c7e0d77f4
[2008/11/29 13:30:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f82875f89c4238c7
[2008/11/29 13:30:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1efcd075191c813f
[2008/11/29 13:30:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\175f22d3772b7138
[2008/11/29 13:30:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\850f0a9491941057
[2008/11/29 13:29:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dcba4698878d6e
[2008/11/29 13:29:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ce252cdaa8c30fc
[2008/11/29 13:29:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fbc3090944e42ecc
[2008/11/29 13:29:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\63d4155249ab0c16
[2008/11/29 13:29:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\60ffd288e1053a57
[2008/11/29 13:29:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bb57cc0374d4d737
[2008/11/29 13:29:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1fbf1acfb76638ac
[2008/11/29 13:28:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ddf6cd83d824b7c8
[2008/11/29 13:28:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9ad40c6c20ab6560
[2008/11/29 13:28:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2b6ecaff50646d2
[2008/11/29 13:28:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3b1565f097fe7506
[2008/11/29 13:28:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\773c10b7b60c00b8
[2008/11/29 13:28:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2b1f8babd0e2f51d
[2008/11/29 13:28:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\857da7d1d020e27d
[2008/11/29 13:28:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1dd7e2701c1d0278
[2008/11/29 13:28:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6fffb7aa771b887
[2008/11/29 13:27:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\91d430f635efc2f4
[2008/11/29 13:27:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5a7820e6a1b123dd
[2008/11/29 13:27:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c23e28f5f5177915
[2008/11/29 13:27:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9cfc4f6bf13b8b1c
[2008/11/29 13:27:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\121cec4d48f4672c
[2008/11/29 13:27:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b292b294d238410e
[2008/11/29 13:27:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dccec97b9b4f6d83
[2008/11/29 13:27:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b993c3f1a1865a6d
[2008/11/29 13:27:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\baa67626feaf5313
[2008/11/29 13:26:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\58eb79fa8b7e5a49
[2008/11/29 13:26:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cfe2c94aa76a879e
[2008/11/29 13:26:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1c13f2c2ed466037
[2008/11/29 13:26:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\41fd8baf4c989b57
[2008/11/29 13:26:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\602bded9b93c79b
[2008/11/29 13:26:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1638af5739b7668f
[2008/11/29 13:26:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8ecde917efae92ea
[2008/11/29 13:26:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4397ebb898f18c02
[2008/11/29 13:26:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\44cf44449658d6e2
[2008/11/29 13:26:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7292e95413e193ee
[2008/11/29 13:26:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\39ba158b23762ee6
[2008/11/29 13:25:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d6e8a89b56427767
[2008/11/29 13:25:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b0596280536b364
[2008/11/29 13:25:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7dd532461b0b061e
[2008/11/29 13:25:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1cd91b942a6e58dc
[2008/11/29 13:25:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c84dc85907e64d
[2008/11/29 13:24:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e8c2182f0c81563
[2008/11/29 13:24:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fa271e12429cbb8
[2008/11/29 13:24:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6c4268aa7fb500c6
[2008/11/29 13:24:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c6dd0792afccd45
[2008/11/29 13:24:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4b22e99e16cf8e12
[2008/11/29 13:24:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2ac1e342a2899350
[2008/11/29 13:24:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8210bea8f436bac0
[2008/11/29 13:24:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\968f9d7c8e0ca650
[2008/11/29 13:24:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\825e3b8ccd8eae
[2008/11/29 13:24:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6ccc688b78b7ba93
[2008/11/29 13:24:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6f38e9ac7e80959c
[2008/11/29 13:23:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\88b69beaaa23c92e
[2008/11/29 13:23:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\547480cc81fd0305
[2008/11/29 13:23:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b5ef6c0e6487eab6
[2008/11/29 13:23:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4b35ed0a7639b445
[2008/11/29 13:23:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a2b1f7c2a1932b3b
[2008/11/29 13:23:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\43ac3b87b6282f6e
[2008/11/29 13:23:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\da91f306c228a0a7
[2008/11/29 13:23:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4915ad929379195
[2008/11/29 13:23:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ca3e99288120348
[2008/11/29 13:23:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6544c7261e491d5
[2008/11/29 13:23:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\403606b932c1a5d0
[2008/11/29 13:23:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\298d3e0da54faac0
[2008/11/29 13:22:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f6801efce392878
[2008/11/29 13:22:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c99b81a5914b1806
[2008/11/29 13:22:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9fe66e7d69e7634
[2008/11/29 13:22:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1d0df36b4499fc9f
[2008/11/29 13:22:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\936a24359273c99b
[2008/11/29 13:22:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\82154fb8ee96da80
[2008/11/29 13:22:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16e4d3a901855a7
[2008/11/29 13:22:26 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b18b717f2dd2d98a
[2008/11/29 13:22:25 | 000,000,062 | -H-- | C] () -- C:\Users\USER\AppData\Local\Thumbs.db
[2008/11/29 13:22:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\22ea20dec720b648
[2008/11/29 13:22:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e63c9ee3e79ab40a
[2008/11/29 13:21:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94d778aa18f5408
[2008/11/29 13:21:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4144045d1fddfdee
[2008/11/29 13:21:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1907f7d24e654a7c
[2008/11/29 13:21:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a9db0a08e95168b2
[2008/11/29 13:21:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\de8ad9a6c8cc903
[2008/11/29 13:21:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\597a09811ead352
[2008/11/29 13:21:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\30b950a5926376d2
[2008/11/29 13:21:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8f072f9d807bb955
[2008/11/29 13:21:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ec9a8e09f959a17
[2008/11/29 13:21:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b3c751a27ff5338c
[2008/11/29 13:21:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\afa3124e1d2eda5
[2008/11/29 13:21:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2d5cf18fce46cf19
[2008/11/29 13:20:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c9d7ce0a578200cd
[2008/11/29 13:20:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9aa7954066aa5e50
[2008/11/29 13:20:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\10e36a4c1c7517af
[2008/11/29 13:20:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\785f6e01a77828d
[2008/11/29 13:20:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\100515f68ccd45ee
[2008/11/29 13:20:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7765b015ef1b2228
[2008/11/29 13:20:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4111af44b0f9246d
[2008/11/21 02:51:05 | 000,000,064 | ---- | C] () -- C:\Windows\yesmessenger.ini
[2008/11/08 21:36:04 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2008/10/28 12:23:40 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2008/10/28 12:23:40 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2008/10/28 12:23:40 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2008/10/22 09:03:28 | 000,003,660 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008/03/05 09:28:28 | 000,286,208 | ---- | C] () -- C:\Windows\System32\cncs232.dll
[2007/07/23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2007/07/23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2007/07/23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2007/07/23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/10/22 04:40:06 | 000,158,208 | ---- | C] () -- C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/01/01 11:51:22 | 000,069,632 | ---- | C] () -- C:\Windows\System32\vuins32.dll
[2006/01/01 11:51:21 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2006/01/01 11:24:31 | 000,001,356 | ---- | C] () -- C:\Users\USER\AppData\Local\d3d9caps.dat
[2006/01/01 11:24:28 | 000,000,020 | -HS- | C] () -- C:\Users\USER\ntuser.ini
[2006/01/01 11:24:27 | 006,291,456 | -HS- | C] () -- C:\Users\USER\ntuser.dat
[2006/01/01 11:24:27 | 000,524,288 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000002.regtrans-ms
[2006/01/01 11:24:27 | 000,524,288 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000001.regtrans-ms
[2006/01/01 11:24:27 | 000,262,144 | -H-- | C] () -- C:\Users\USER\ntuser.dat.LOG2
[2006/01/01 11:24:27 | 000,262,144 | -H-- | C] () -- C:\Users\USER\ntuser.dat.LOG1
[2006/01/01 11:24:27 | 000,065,536 | -HS- | C] () -- C:\Users\USER\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TM.blf
[1999/01/22 08:46:58 | 000,065,536 | ---- | C] () -- C:\Windows\System32\MSRTEDIT.DLL

========== LOP Check ==========

[2009/01/11 12:51:07 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\.wyzo
[2009/10/20 22:20:29 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\2020 Fusion
[2009/09/01 10:09:39 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\CVitae
[2009/02/03 08:20:03 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\DAEMON Tools
[2009/02/03 14:06:08 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\DAEMON Tools Lite
[2009/02/03 08:20:02 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\DAEMON Tools Pro
[2008/12/01 23:47:19 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\EleFun Desktops
[2009/04/23 11:10:09 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Flood Light Games
[2009/07/02 17:06:14 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\fltk.org
[2008/11/28 09:56:39 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\funkitron
[2009/08/03 14:59:07 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Gearbox Software
[2008/11/23 05:48:50 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\GetRightToGo
[2010/03/06 04:22:01 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\igraal
[2009/08/23 21:06:12 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\InfraRecorder
[2009/06/23 18:33:42 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\iPodder
[2008/10/23 08:41:26 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Leadertech
[2010/04/17 20:54:38 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\LimeWire
[2010/02/03 18:29:31 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\LiveCAD3
[2009/01/03 18:11:33 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\NetMedia Providers
[2008/12/01 21:19:33 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Nubs
[2009/09/18 21:41:06 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\OpenCandy
[2008/11/11 16:35:58 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\opencity
[2006/10/21 20:12:40 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\OpenOffice.org
[2010/03/06 03:44:01 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Passware
[2009/01/03 18:11:33 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Publish Providers
[2009/09/18 21:49:12 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Regensoft
[2009/09/08 16:47:30 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\SecondLife
[2009/10/01 14:57:30 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Serif
[2009/03/24 15:45:28 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Shareaza
[2009/05/24 09:20:19 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Sony
[2008/12/10 11:46:43 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\streamripper
[2010/03/24 14:58:33 | 000,000,000 | -HSD | M] -- C:\Users\USER\AppData\Roaming\SystemProc
[2010/02/01 21:32:24 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Template
[2009/09/13 02:23:32 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Windows Live Writer
[2009/04/23 09:42:14 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\Zylom
[2010/04/17 15:26:36 | 000,000,362 | ---- | M] () -- C:\Windows\Tasks\Install_NSS.job
[2010/04/14 13:01:34 | 000,032,572 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010/04/14 18:10:00 | 000,000,400 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{000EE505-DF96-49B3-A96A-C4275A922361}.job
[2010/04/14 18:10:00 | 000,000,416 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{334A4BE3-F41F-44AD-887E-AFD029110187}.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >
[2007/11/07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< MD5 for: AGP440.SYS >
[2008/01/19 03:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/19 03:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/19 03:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/19 03:42:25 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006/01/01 11:49:43 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_8ed06b47\AGP440.sys
[2006/01/01 11:49:43 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.16400_none_b82caac9c18a4e3b\AGP440.sys
[2006/01/01 11:49:43 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=BF34B4A0E0B64440C5389AA6B902F4AD -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20496_none_b85af81edaeb8461\AGP440.sys
[2006/11/02 05:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\drivers\AGP440.sys
[2006/11/02 05:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: AHCIX86S.SYS >
[2008/04/02 15:40:48 | 000,175,632 | ---- | M] (AMD Technologies Inc.) MD5=844A6734E8BB3530FB1444ED698087BD -- C:\ATI\SUPPORT\8-6_vista32_dd_ccc_wdm_enu_64789\Packages\Drivers\SBDrv\SB7xx\RAID\LH\ahcix86s.sys
[2007/04/16 18:16:34 | 000,119,296 | ---- | M] (ATI Technologies Inc.) MD5=A5AC7B705166BF7CD07BB054BEEA8D03 -- C:\ATI\SUPPORT\8-6_vista32_dd_ccc_wdm_enu_64789\Packages\Drivers\SBDrv\SB6xx\RAID\LH64A\ahcix86s.sys

< MD5 for: ATAPI.SYS >
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/19 03:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/19 03:41:30 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 05:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2007/05/30 11:01:31 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=78620BDA3EC87816E5D1FA86F920BC3A -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c2a1b5ae\atapi.sys
[2007/05/30 11:01:31 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=78620BDA3EC87816E5D1FA86F920BC3A -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20518_none_dbd8b4d73d81c9d0\atapi.sys
[2008/10/23 21:25:14 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008/10/23 21:25:14 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008/10/23 21:25:13 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_64dfd8ea\atapi.sys
[2008/10/23 21:25:13 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 05:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006/11/02 05:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2008/01/19 03:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/19 03:42:51 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 05:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 05:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2006/11/02 05:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009/04/11 02:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/11 02:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/19 03:35:36 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2007/01/05 16:59:42 | 000,035,920 | ---- | M] (NVIDIA Corporation) MD5=4A5FCAB82D9BF6AF8A023A66802FE9E9 -- C:\Windows\System32\drivers\nvstor.sys
[2007/01/05 16:59:42 | 000,035,920 | ---- | M] (NVIDIA Corporation) MD5=4A5FCAB82D9BF6AF8A023A66802FE9E9 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_45f67928\nvstor.sys
[2006/11/02 05:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/19 03:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/19 03:42:09 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/19 03:36:19 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006/11/02 05:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/03/08 07:33:04 | 000,420,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\vbscript.dll

< %systemroot%\Tasks\*.job /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:B623B5B8
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:7F66BF58
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:ADF211B1
< End of report >

nanoua971 · le 18 Avr 2010 23:22

OTL Extras logfile created on: 18/04/2010 17:52:04 - Run 1
OTL by OldTimer - Version 3.2.1.2 Folder = C:\Users\USER\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 37,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 70,00% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 55,58 Gb Free Space | 37,29% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 951,81 Mb Total Space | 108,48 Mb Free Space | 11,40% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-USER
Current User Name: USER
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- Reg Error: Key error. File not found
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"FirstRunDisabled" = 0
"UacDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0581AB94-E641-4025-B193-3D9AD10AEB5C}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=c:\windows\system32\svchost.exe |
"{069E4F21-6C70-4DD7-9661-E321558C9B26}" = lport=139 | protocol=6 | dir=in | app=system |
"{06B54E0B-5535-4EEF-85CF-4EC1DF161544}" = rport=137 | protocol=17 | dir=out | app=system |
"{0DC9CD56-4D3B-462D-8808-58D31FBA99CA}" = lport=445 | protocol=6 | dir=in | app=system |
"{17C986D5-1DC3-4917-A8A2-352EB2D0BDA7}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{194CADE5-B9F4-455A-9506-15F2F16617B8}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{1F99368A-7FDF-401B-8A33-28BFB3B1C3DD}" = rport=445 | protocol=6 | dir=out | app=system |
"{224B5D22-53B7-4B0D-A3DA-69CBA2117119}" = rport=10243 | protocol=6 | dir=out | app=system |
"{2AC48870-D716-4719-BC01-4A2B9AF0C20D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2B00B147-2368-4E34-B383-0A636C9FCA97}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{325DDB8A-8AAC-4401-BCC1-A6BEFA3C9EA1}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{34FD1468-7436-4BA3-9DF5-2F49F337F61D}" = lport=1701 | protocol=17 | dir=in | app=system |
"{3A70C46D-CD1A-4EC5-AC50-90B9868B61FA}" = lport=2869 | protocol=6 | dir=in | app=system |
"{3AAC6367-164E-4935-BE8B-44197B1313A1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{422AAB04-F23A-437A-B448-BDDD3B42C4C7}" = lport=1701 | protocol=17 | dir=in | app=system |
"{4841A6B5-F33E-4896-9EA2-7EBF06CDEB83}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4A012AD3-2EE4-4E3F-86A0-B86E1A3DA33A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{53FC59BF-7315-4629-946E-6DAE38044F5F}" = lport=445 | protocol=6 | dir=in | app=system |
"{5411A7E7-AD4F-4292-AC7D-7A735A636496}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{563C9B14-9ACA-488C-B138-309255AF4BAC}" = rport=138 | protocol=17 | dir=out | app=system |
"{597B1FBC-01FA-4E36-B322-A5B32CF17503}" = lport=445 | protocol=6 | dir=in | app=system |
"{5B58EA13-5F53-47C4-AEB7-1C6C7E3A4AF0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{5BF82125-9F97-418F-9B16-6F3344F6C817}" = lport=1723 | protocol=6 | dir=in | app=system |
"{7091C010-4A80-467E-84C7-017CE099D39D}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{7688DA02-D277-4805-957C-1BAA8E982471}" = lport=2869 | protocol=6 | dir=in | app=system |
"{78654DB0-4D00-49CB-B6DC-A5517AB6A936}" = lport=2869 | protocol=6 | dir=in | app=system |
"{79BC275B-510A-49EA-AE81-354FD4175274}" = rport=1701 | protocol=17 | dir=out | app=system |
"{7A944DBE-5CBD-40A0-A0F4-21C8C511858E}" = rport=1723 | protocol=6 | dir=out | app=system |
"{87C5BD47-A4B0-49E4-9707-9525B81006EB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{8B7F6F1E-82EA-495F-ADD8-05884EFA7CDD}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8F3BFC4C-FCDE-41A4-95EE-0C00611EE8CA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{95039668-5C07-4C11-8863-3ECDC6F11EE1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9C4895C0-DD22-4A01-82E5-B69C4266B63F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{A1E5AD5F-9BA5-4D06-A8F5-D7DF563CB0CB}" = lport=138 | protocol=17 | dir=in | app=system |
"{A465AEC8-853E-4B83-AF1F-EF7E36541E6F}" = rport=139 | protocol=6 | dir=out | app=system |
"{A53CF7EB-EC59-4D4C-88A7-CCC05EB42A8B}" = lport=3702 | protocol=17 | dir=in | app=c:\windows\system32\p2phost.exe |
"{A5E623D4-54DB-4F1F-BAA4-A3DFF0CECE15}" = lport=rpc | protocol=6 | dir=in | svc=* | app=c:\windows\system32\svchost.exe |
"{A899B6E5-CD3E-46A0-A95F-1D0D3111AEA6}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AB2F8DD5-7770-4E42-AE20-FB7EE37E1903}" = rport=1701 | protocol=17 | dir=out | app=system |
"{B7B40868-F38F-492B-BB40-5F2E46A258AC}" = lport=1723 | protocol=6 | dir=in | app=system |
"{B7C70CE6-F645-40A9-828D-F030A41D3826}" = lport=10243 | protocol=6 | dir=in | app=system |
"{BE0E494C-8206-4E61-BB93-EDB4E2DF7A60}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{BE2AA2E1-5EA9-4BAF-8598-D5E1A73D1E5E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{BE8D8DA9-1BA6-4EC6-BADE-AB1366A41DDD}" = rport=3702 | protocol=17 | dir=out | app=c:\windows\system32\p2phost.exe |
"{CD0B1C8E-254E-440C-9A57-467E08675F71}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{D0BCB68B-72CC-4F1E-973F-931FE36E91B3}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=c:\windows\system32\svchost.exe |
"{D0C0C9AB-858F-4EDB-9469-2AFF229ECDA9}" = lport=137 | protocol=17 | dir=in | app=system |
"{D25AEA53-7136-41B8-AE11-A5A3FE9B2080}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F1D341F2-6516-42FB-9E4D-620DAFFE2750}" = rport=1723 | protocol=6 | dir=out | app=system |
"{F5DE1D85-EED5-4634-8FDA-6CEB4D0BB7DB}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{FDAECBFC-E891-43A8-99AD-5C4B648D6205}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0238B8EC-4740-43D1-BFD7-970B2A9A9B7D}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{02F5D8C4-91F1-4745-A44B-1A95227BF97A}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{0733DFDB-5BE2-4232-A483-00F69A889B27}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{07F00934-951E-4973-B6A8-74A7EDB3785F}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{0C521A43-1FEC-4CA4-83DA-8122C995C8F7}" = protocol=6 | dir=out | app=system |
"{0D569412-A2B2-491D-8D7F-BCB46FEA6858}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgh.exe |
"{0D6023D4-DBFA-4401-B09A-90B0F600B0B9}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqsudi.exe |
"{0D9D1179-6020-4EC2-9CCF-FCF94B34FC96}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |
"{122C6B4B-1FA6-4147-A753-643E4F025F49}" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"{14108CBA-A82F-4408-B16E-94AEE8A5F996}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1526CAEA-4825-4B89-8405-9834D06690F0}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{1578CA64-7AAB-4237-910E-2BA940827186}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |
"{16DF292E-AC38-4598-A2F2-8EF22E30F059}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{176C2686-797B-4439-8AA5-6B239AB20D4C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{18B50F37-6A8B-4A4A-B8E8-972D0B5707BE}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{1CBC6B18-3929-4C5A-B50D-E4EAF7A50446}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{1EC88BAD-8922-4CB3-BBB2-41193CA52E35}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpsapp.exe |
"{1F5B8526-C479-4F72-BFB5-605CFA7929B4}" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"{28B620CE-83FB-4057-9B7A-B6D81135F129}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{2E367DA9-50C4-4BFB-9DB6-58C35B5E4BBF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{2F5EF0BF-CC88-41EB-80B7-E4CFCB70FCE7}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{316929ED-1341-46EE-A2E3-18FFDE99676B}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{3219EB7D-D14C-4A0B-A603-2BBE07273447}" = protocol=6 | dir=out | app=system |
"{322C5DDA-3B33-4D25-B0BC-06AB9B336FEE}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |
"{34702954-0713-456B-9CE3-3F49EE222212}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |
"{364C8C86-1C6E-4FFF-AB9F-20D8E5B1259E}" = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{3B8CA4A3-2B4B-40F5-B8D3-DD31CC3D3E97}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{44E94A95-4B36-4419-84D3-93A874E44EDE}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{48F3028A-FF57-4D1D-A44D-2E1B30D44563}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{48F3A673-DB19-45A1-A783-AFD9BF1A2F38}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{4A4943A4-5E05-446B-B096-3B22DC9F6634}" = protocol=6 | dir=out | app=c:\windows\system32\wudfhost.exe |
"{4C6D8479-4E84-450E-8647-E3198620C8DC}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{4DF0910A-09E0-4083-89FA-1BAEEC360BC1}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |
"{4EF32105-50F4-4EB0-9F7C-E91BC57D3483}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{4FB9CE1F-73E2-4FBD-A29D-97F07CA912DF}" = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |
"{5343703F-C97E-4E0B-A995-BE60BDD54184}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |
"{59BE371D-42D6-4681-93A6-00B3FF603135}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{5FEA18D7-3C34-440F-A913-7DEC8E0F4D15}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{62D1DE73-4374-43BB-AD53-43F6B64D22AA}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{65E39273-ABC3-4B2E-AE26-08557A37F8EF}" = protocol=6 | dir=in | app=c:\windows\system32\msra.exe |
"{6768580B-12EA-490F-B9F7-FC7E35EC9F6C}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |
"{69C36D34-2E8D-47CC-B368-087691756201}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{6D896292-CA41-4C12-99F5-13276112D6B0}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{6DA920D5-7ABF-494D-BD90-50CBB198A7A8}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{6E7C45CC-5E45-4827-B863-3B05E3474DCF}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqcopy2.exe |
"{6FB5C7F3-28F6-41B6-83CD-2902E4ECA4B4}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{706FC6C0-9E17-4E4F-81C9-13C447E6F8C0}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{73F07E2E-9988-43FF-9727-3CD56EEE49BC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{75985FEF-181B-4A77-95AD-D2FFAB8234F2}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{76FCAE7A-E068-4A7B-AE5F-827F1B4AE806}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{77BE3E79-6E80-4212-8F05-80BBD9E2F270}" = dir=in | app=c:\windows\explorer.exe |
"{78572054-C2C4-421B-B767-9BC444EDC70B}" = protocol=6 | dir=out | app=c:\windows\system32\msra.exe |
"{7ACC6E87-8C12-4adb-91B7-EFC3F2F4705A}" = protocol=6 | dir=in | app=c:\windows\explorer.exe |
"{7AFED102-B5E0-43BE-8541-470D01F14B76}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{7C572822-61A6-44FB-9989-7A13EDDED3BE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7F88100A-31C4-48F4-AD98-4FAFF2487222}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{82458A6B-652E-41D9-8B14-9AB54D503699}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{84C4C3FA-9CBD-4BE9-9899-A4B3CF1DA011}" = protocol=6 | dir=out | app=c:\windows\system32\p2phost.exe |
"{85D343BA-061A-4DBC-999B-7AA7717D731D}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |
"{8661B525-63C1-4B7E-9486-D1190BA08AE1}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpse.exe |
"{8C8C8ECC-49A9-44A2-BB3E-F49D1C6D41C9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8F6AE5E3-E41B-47B0-9884-E6AC1A46DCF7}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{91A59851-8546-431F-AEB6-AD81EC247E77}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{92459C5E-D350-4cba-AA74-C8F989C9336F}" = protocol=17 | dir=out | app=c:\windows\explorer.exe |
"{94E79486-F490-4A7C-B18D-1F0F83E6AAB2}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{95FAACBC-69C9-4BBE-9CB6-08F6731AAFBA}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{9CF5D96F-87D2-48E8-AEB2-733191B2D251}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{9F731746-DCCD-4183-8DCB-F86A2B596F80}" = protocol=17 | dir=in | app=c:\program files\shiny\messiah\messiahglide3x.exe |
"{A20C4558-58E1-42EA-A230-721F84C5A2C5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A37BF115-5BF0-4EBC-8AB1-97C3B816E7D7}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{A743F7B9-1267-4DD5-816D-99E10496CF30}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A89D8C80-E7A1-4528-A3E6-E66D9D32D583}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{ACEE03FF-804E-44B4-921F-39185E47D6FD}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |
"{B078B2B6-A878-44ff-9BCC-458257924F96}" = protocol=17 | dir=in | app=c:\windows\explorer.exe |
"{B1A40E4F-58DB-490f-9D18-55B5194E8BD5}" = protocol=6 | dir=out | app=c:\windows\explorer.exe |
"{B6082ED2-F9E5-412B-84BC-92432AEFF959}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |
"{B611C9FD-F8FD-4AB0-A1A6-E8040C122611}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{B644FCCE-9680-499E-A368-92B0F11970C8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BA02C625-2E32-4A0A-A7D4-6CC7019ED3FF}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |
"{BB0C4CC6-6206-425B-A0D4-989548C4D50E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C25A5AA9-972B-4305-8D4F-DD8FFDB9F99D}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{C3E9B20A-B7E2-4aab-9835-3C548937E46F}" = dir=out | app=c:\windows\explorer.exe |
"{C87522DC-BEE9-41D0-8AA6-3AC729BBB79A}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{D1011453-2AF9-4E07-91E2-3329511172C6}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{D1B6D4D8-2BF9-4C46-A886-D6B36317E054}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{D4630A0D-241D-42CD-ACD7-1625CBE2A103}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{D6B62254-2469-4201-A97C-25A9B1330F6A}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{DBD6A17B-F9E9-4459-BFD6-7422AF752565}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{E043558F-51C2-4E14-8EB2-755EB9029A48}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{E630E9CA-4D4D-4AED-A172-1F23E425386F}" = protocol=6 | dir=in | app=c:\program files\shiny\messiah\messiahglide3x.exe |
"{E6342009-437F-4129-A604-0C91391362FC}" = protocol=6 | dir=out | app=%systemroot%\explorer.exe |
"{E9B078E4-85B6-449C-BCAF-4826B8DD0000}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{EB496F5E-94A6-4CE1-9514-296D4266379A}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{EC9091D7-74E1-4699-AE38-CF39DFEDDDB2}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqusgm.exe |
"{EDBEF565-18C1-45FD-8AD6-73C3CC04C342}" = protocol=6 | dir=in | app=c:\windows\system32\p2phost.exe |
"{F12D3ACC-8083-45A9-BE25-9799B800B76F}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |
"{F3857CCF-70A9-49D1-8896-F3940B128FDE}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{FC1836FF-3F52-49C9-A453-B0DA732EFE12}" = protocol=6 | dir=in | app=%systemroot%\explorer.exe |
"{FF306C32-CCE8-4159-AC5C-95F7729AE9CA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{12FE2BA4-229E-42AE-9B33-2FA61BFA8627}C:\program files\live-player\live-player.exe" = protocol=6 | dir=in | app=c:\program files\live-player\live-player.exe |
"TCP Query User{1A9A8304-ECAF-4E82-B8A1-7E5B161A886F}C:\program files\adsltv\adsltv.exe" = protocol=6 | dir=in | app=c:\program files\adsltv\adsltv.exe |
"TCP Query User{1F59436F-2321-470E-9E74-57876BFC3FCF}C:\program files\ea games\mohda\mohaa.exe" = protocol=6 | dir=in | app=c:\program files\ea games\mohda\mohaa.exe |
"TCP Query User{2E8B3D4B-9894-4647-AE23-6F70E51440B2}C:\program files\codemasters\worms 4 mayhem\worms 4 mayhem.exe" = protocol=6 | dir=in | app=c:\program files\codemasters\worms 4 mayhem\worms 4 mayhem.exe |
"TCP Query User{43A026A7-8BB2-468F-B514-2605976E4977}C:\users\user\documents\dimitri\jeux\war 3\war3.exe" = protocol=6 | dir=in | app=c:\users\user\documents\dimitri\jeux\war 3\war3.exe |
"TCP Query User{50A407F9-8D53-4541-98C9-896F138E4692}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{57353335-442F-44FC-80C0-09B2E62019D9}C:\program files\garena\garena.exe" = protocol=6 | dir=in | app=c:\program files\garena\garena.exe |
"TCP Query User{59640E30-9A61-4E81-B29E-9330CFE9884E}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{63358366-2A8D-4126-A490-61985FF7EF8E}C:\users\user\desktop\jeux\war 3\war3.exe" = protocol=6 | dir=in | app=c:\users\user\desktop\jeux\war 3\war3.exe |
"TCP Query User{63BC9995-43C6-4D6C-B42C-C8EAFC7E0E52}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{7D311088-6611-4541-B2C3-647AC2F03F03}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{8E64D8AC-0CAC-4395-A1EB-4CE745E953C5}C:\users\user\desktop\war 3\garena\garena.exe" = protocol=6 | dir=in | app=c:\users\user\desktop\war 3\garena\garena.exe |
"TCP Query User{9B2BB3C9-E357-4916-86D3-4607408DF8A5}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{9BD7C24B-97EF-4003-B546-D3194B9571B3}C:\users\user\desktop\jeux\war 3\war3.exe" = protocol=6 | dir=in | app=c:\users\user\desktop\jeux\war 3\war3.exe |
"TCP Query User{CA111BAF-AA2E-4D11-B927-87BF63790584}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{DDD251BC-0B50-4242-8533-3F29363A86AD}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{DF2F281A-C44D-4268-8E38-DAFB75CA4E7F}C:\program files\atari-infogrames\monopoly tycoon\mc.exe" = protocol=6 | dir=in | app=c:\program files\atari-infogrames\monopoly tycoon\mc.exe |
"TCP Query User{F1AA15A4-FDF0-4971-A160-0A7D67BEC834}C:\users\user\desktop\war 3\war3.exe" = protocol=6 | dir=in | app=c:\users\user\desktop\war 3\war3.exe |
"UDP Query User{08E7616B-9D45-4B4F-9CDA-8FC166326955}C:\program files\ea games\mohda\mohaa.exe" = protocol=17 | dir=in | app=c:\program files\ea games\mohda\mohaa.exe |
"UDP Query User{13FB21DC-CC46-4B4E-8CF7-4E54836D1BBB}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{2474B6EB-611C-4116-AE2B-AE4E848AB069}C:\users\user\desktop\jeux\war 3\war3.exe" = protocol=17 | dir=in | app=c:\users\user\desktop\jeux\war 3\war3.exe |
"UDP Query User{2DEF54BD-655B-4B59-8FC8-3F47B4FCF2C5}C:\program files\atari-infogrames\monopoly tycoon\mc.exe" = protocol=17 | dir=in | app=c:\program files\atari-infogrames\monopoly tycoon\mc.exe |
"UDP Query User{3434C5EC-0057-40AF-AC5B-7B2AE63575B9}C:\users\user\documents\dimitri\jeux\war 3\war3.exe" = protocol=17 | dir=in | app=c:\users\user\documents\dimitri\jeux\war 3\war3.exe |
"UDP Query User{37216DA2-D30C-4BA7-BA81-31A03F6BF7BF}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{55D2482D-BBEB-48E6-8219-8B8B2D8A71FD}C:\users\user\desktop\jeux\war 3\war3.exe" = protocol=17 | dir=in | app=c:\users\user\desktop\jeux\war 3\war3.exe |
"UDP Query User{5E6AA170-6B7F-45C6-9512-CE314B6A5FEC}C:\program files\adsltv\adsltv.exe" = protocol=17 | dir=in | app=c:\program files\adsltv\adsltv.exe |
"UDP Query User{6A8F76E7-33AC-4801-ACF5-1BF474DFD8FE}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{6D5A192B-ADC8-42DE-999D-331F23F48730}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{7C001501-0316-478A-8CCD-E6DA4827D1BE}C:\users\user\desktop\war 3\war3.exe" = protocol=17 | dir=in | app=c:\users\user\desktop\war 3\war3.exe |
"UDP Query User{7DFD158D-CB2B-4320-A41A-C2858EF44F70}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{7F13B2D1-C933-428E-8D7F-11C8AD761B28}C:\program files\codemasters\worms 4 mayhem\worms 4 mayhem.exe" = protocol=17 | dir=in | app=c:\program files\codemasters\worms 4 mayhem\worms 4 mayhem.exe |
"UDP Query User{AFAADCE4-0D03-44A5-96D3-65B96E203AC4}C:\program files\live-player\live-player.exe" = protocol=17 | dir=in | app=c:\program files\live-player\live-player.exe |
"UDP Query User{B870BA27-14FE-4B74-A31B-9935CA888E64}C:\users\user\desktop\war 3\garena\garena.exe" = protocol=17 | dir=in | app=c:\users\user\desktop\war 3\garena\garena.exe |
"UDP Query User{CC9CC526-246D-49A4-BB2D-C96786E76D49}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{D8CEB4F6-DB7B-46FB-A663-485458644B6B}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{FD39E5E9-D15F-4001-9A50-D98F68179483}C:\program files\garena\garena.exe" = protocol=17 | dir=in | app=c:\program files\garena\garena.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_Jk5_Z6O6pp3xTI" = LoudMo Contextual Ad Assistant
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{1C7575B0-CCE2-4B96-83A8-F6DB45C0B945}" = Disney Atlantide - L’Epreuve du Feu
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17
"{2EAF7E61-068E-11DF-953C-005056806466}" = Google Earth
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup
"{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{53B20C18-D8D4-4588-8737-9BBFE303C354}" = Windows Live Movie Maker
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}" = Microsoft Works
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{7988ba74-4a27-4685-991a-53f072f22808}" = F2200_Help
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{8B7917E0-AF55-4E8A-9473-017F0AA03AC8}" = QuickTime
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95FC26FB-19FD-4A96-BBB1-B1062E8648F5}" = AGEIA PhysX v7.11.13
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{A46AA50A-5A57-3A6B-B09E-628C09CB7679}" = ATI Catalyst Install Manager
"{A654A805-41D9-40C7-AA46-4AF04F044D61}" = Adobe® Photoshop® Album Edition Découverte 3.2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1036-7B44-A92000000001}" = Adobe Reader 9.2 - Français
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B131E59D-202C-43C6-84C9-68F0C37541F1}" = Galerie de photos Windows Live
"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{c6922d7f-c698-4d9e-9671-8b3de04d1511}" = DJ_AIO_03_F2200_Software_Min
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch
"{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}" = Assistant de connexion Windows Live
"{D374F8CD-E0F3-4810-A48F-3C96E86AF6B4}" = Code de la Route Pratic
"{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}" = Windows Live Contrôle parental
"{D77D43B5-ED55-426b-B67B-E21F804F6102}" = HP Deskjet F2200 All-In-One Driver Software 10.0 Rel .3
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component
"{db18dc72-cd20-4801-be82-f5d2caeec4d7}" = DJ_AIO_03_F2200_Software
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{e97a9fd7-2fa1-4474-820d-3f8893a5b78a}" = F2200
"{eca3039b-e429-420f-bd5e-7dec0683fc32}" = DJ_AIO_03_F2200_ProductContext
"{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = USB PC Camera Plus
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy
"{F7D27C70-90F5-49B9-B188-0A133C0CE353}" = Windows Live Toolbar
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe® Photoshop® Album Edition Découverte 3.2" = Adobe® Photoshop® Album Edition Découverte 3.2
"avast!" = avast! Antivirus
"AviSynth" = AviSynth 2.5
"BFGC" = Big Fish Games: Game Manager
"BFG-Laura Jones and the Gates of Good and Evil" = Laura Jones and the Gates of Good and Evil
"CCleaner" = CCleaner
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = Configuration DivX
"EAX Unified" = EAX Unified
"ezLife" = ezLife browser enhancer
"Google Chrome" = Google Chrome
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 10.0
"InfraRecorder" = InfraRecorder
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"Internet Scrabble Club_is1" = WordBiz version 1.8
"LimeWire" = LimeWire 5.5.7
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"NVIDIA Drivers" = NVIDIA Drivers
"PROPLUS" = Microsoft Office Professional Plus 2007
"Shop for HP Supplies" = Shop for HP Supplies
"ShoppingReport" = ShopperReports
"SiS163u" = Fujitsu Siemens Computers WLAN 802.11b/g (SiS163u)
"Smart-Ads-Solutions" = SmartAds browser enhancer
"SuperCopier2" = SuperCopier2
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VIA Chrome9 HC IGP Family Windows Vista Display" = VIA Display Vista Driver 7.14.14.0010
"VLC media player" = VLC media player 1.0.1
"VN_VUIns_Rhine_VIA" = VIA Rhine Family Fast Ethernet Adapter
"WeFiBar Toolbar" = WeFiBar Toolbar
"Winamp Toolbar for Firefox" = Winamp Toolbar for Firefox
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = WinRAR archiver
"wptzdgwraer" = Performance Solution Hotrevenue
"YInstHelper" = Yahoo! Install Manager
"Zuma's Revenge!1.0" = Zuma's Revenge!

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"CVitaeV4" = CVitaeV4
"mpowerplayer" = mpowerplayer
"Notification de cadeaux MSN" = Notification de cadeaux MSN

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 28/03/2010 16:08:20 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::OnCreate()
!m_strErrorWnd.IsEmpty().

Error - 28/03/2010 16:08:57 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = Error in aswChestC: chestOpenList Error 1753.

Error - 28/03/2010 16:08:57 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::LoadFiles()
chestOpenList() failed: 2147422219.

Error - 28/03/2010 16:08:59 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::OnCreate()
!m_strErrorWnd.IsEmpty().

Error - 28/03/2010 16:12:47 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = Error in aswChestC: chestOpenList Error 1753.

Error - 28/03/2010 16:12:47 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::LoadFiles()
chestOpenList() failed: 2147422219.

Error - 28/03/2010 16:12:53 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::OnCreate()
!m_strErrorWnd.IsEmpty().

Error - 13/04/2010 11:17:26 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = Error in aswChestC: chestOpenList Error 1753.

Error - 13/04/2010 11:17:27 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::LoadFiles()
chestOpenList() failed: 2147422219.

Error - 13/04/2010 11:17:45 | Computer Name = PC-de-USER | Source = avast! | ID = 33554522
Description = aswChestInterface - Program error description: CChestListView::OnCreate()
!m_strErrorWnd.IsEmpty().

[ Application Events ]
Error - 17/03/2009 18:39:48 | Computer Name = PC-de-USER | Source = Application Hang | ID = 1002
Description = Le programme WINWORD.EXE version 9.0.0.2717 a cessé d’interagir avec
Windows et a été fermé. Pour déterminer si des informations supplémentaires sont
disponibles, consultez l’historique du problème dans l’application Rapports et
solutions aux problèmes du Panneau de configuration. ID de processus : 5e4 Heure de
début : 01c9a75135240dc1 Heure de fin : 229

Error - 17/03/2009 18:41:56 | Computer Name = PC-de-USER | Source = Application Hang | ID = 1002
Description = Le programme WINWORD.EXE version 9.0.0.2717 a cessé d’interagir avec
Windows et a été fermé. Pour déterminer si des informations supplémentaires sont
disponibles, consultez l’historique du problème dans l’application Rapports et
solutions aux problèmes du Panneau de configuration. ID de processus : 1080 Heure
de début : 01c9a7518037aeb2 Heure de fin : 255

Error - 18/03/2009 15:01:44 | Computer Name = PC-de-USER | Source = VSS | ID = 8194
Description =

Error - 20/03/2009 07:51:00 | Computer Name = PC-de-USER | Source = VSS | ID = 8194
Description =

Error - 22/03/2009 08:44:53 | Computer Name = PC-de-USER | Source = VSS | ID = 8194
Description =

Error - 22/03/2009 09:13:08 | Computer Name = PC-de-USER | Source = MsiInstaller | ID = 11305
Description =

Error - 22/03/2009 09:13:36 | Computer Name = PC-de-USER | Source = MsiInstaller | ID = 11305
Description =

Error - 22/03/2009 09:14:08 | Computer Name = PC-de-USER | Source = MsiInstaller | ID = 11305
Description =

Error - 22/03/2009 09:14:13 | Computer Name = PC-de-USER | Source = MsiInstaller | ID = 11305
Description =

Error - 22/03/2009 09:14:41 | Computer Name = PC-de-USER | Source = MsiInstaller | ID = 11305
Description =

[ OSession Events ]
Error - 13/11/2009 02:16:36 | Computer Name = PC-de-USER | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 40829
seconds with 5340 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 15/04/2010 12:08:17 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 15/04/2010 19:20:47 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 16/04/2010 19:21:00 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 16/04/2010 19:41:57 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 16/04/2010 22:09:40 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 16/04/2010 22:27:24 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 17/04/2010 13:40:15 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 17/04/2010 15:28:07 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 17/04/2010 19:21:06 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

Error - 18/04/2010 00:41:42 | Computer Name = PC-de-USER | Source = DCOM | ID = 10005
Description =

< End of report >

nanoua971 · le 18 Avr 2010 23:25

par contre je voudrais préciser que je suis en mode sans échec car je n'arrive pas a démarrer en mode normal

jeanmimigab · le 19 Avr 2010 17:45

bonsoir,

allez on se lance...tuapprécieras le nombre d'éléments infectieux a virer !

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Output" (en haut à droite) la case "minimal Output" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Custom scan/fixes"

:Files
C:\Program Files\Common Files\BOONTY Shared
C:\Program Files\WeFiBar
C:\Program Files\mozilla firefox\components\ffxShot.dll
C:\Program Files\mozilla firefox\components\GooglePlusVideosXPCOM.dll
C:\Program Files\mozilla firefox\components\SuperSearchXPCOM.dll
C:\Windows\System32\dhcpcsvc32.dll
C:\PROGRA~1\GOOGLE~1\17GOOG~1.DLL
C:\Windows\System32\aknqvjjjggvqx.dll
C:\PROGRA~1\EASYSE~1\BHO\12SUPE~1.DLL
C:\Program Files\ShoppingReport
C:\Windows\System32\qjueplzs.dll
C:\Windows\System32\vldgpkus.dll
C:\Windows\System32\aknqvjjjggvqx.dll
C:\autoexec.bat
C:\Windows\System32\GV3r3A.dll
C:\Program Files\Ask.com
C:\Windows\System32\qjueplzs.dll
C:\Windows\System32\aknqvjjjggvqx.dll
C:\Users\USER\AppData\Roaming\SystemProc\lsass.exe
C:\Users\USER\AppData\Roaming\SystemProc

:OTL
SRV - (Boonty Games) -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (BOONTY)
IE - HKLM\..\URLSearchHook: {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hotbar.com/search
IE - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\URLSearchHook: {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
[2009/09/18 01:19:45 | 000,000,000 | ---D | M] (MyPlayCity Toolbar) -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}
[2010/03/29 01:48:12 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com
[2009/01/15 06:58:20 | 000,000,882 | ---- | M] () -- C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\conduit.xml
[2010/03/14 05:29:32 | 000,065,536 | ---- | M] (TODO: <Company name>) -- C:\Program Files\mozilla firefox\components\ffxShot.dll
[2009/04/07 14:52:04 | 000,028,672 | ---- | M] () -- C:\Program Files\mozilla firefox\components\GooglePlusVideosXPCOM.dll
[2009/08/09 17:14:12 | 000,049,152 | ---- | M] () -- C:\Program Files\mozilla firefox\components\SuperSearchXPCOM.dll
O2 - BHO: (no name) - {007B1F64-1403-41E6-80CC-16A6787CA676} - C:\Windows\System32\dhcpcsvc32.dll ()
O2 - BHO: (Google Plus) - {01677B4B-0610-4814-94A0-5F570DD7A88F} - C:\PROGRA~1\GOOGLE~1\17GOOG~1.DLL ()
O2 - BHO: (hotrevenue browser enhancer) - {01DF85E9-89E3-842D-01F6-5AAB21204324} - C:\Windows\System32\aknqvjjjggvqx.dll ()
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Super-Search -Find more of what you need) - {0286A85D-CD62-43bb-B7A9-A87D1D027160} - C:\PROGRA~1\EASYSE~1\BHO\12SUPE~1.DLL File not found
O2 - BHO: (WeFiBar Toolbar) - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O2 - BHO: (ShoppingReport) - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O2 - BHO: (no name) - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - No CLSID value found.
O2 - BHO: (adShotHlpr Object) - {547366DF-BAD6-496C-97BA-95787132ECAD} - C:\Windows\System32\qjueplzs.dll ()
O2 - BHO: (adHlpr Object) - {8BDA00C9-58A0-492D-A809-D57735C6EB21} - C:\Windows\System32\vldgpkus.dll ()
O2 - BHO: (installnetworkworld) - {9fdfa862-2f91-2879-66e0-53f0053076d5} - C:\Windows\System32\GV3r3A.dll ()
O2 - BHO: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (WeFiBar Toolbar) - {0b876028-b388-4f6d-922f-f52faec8535f} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\Toolbar\WebBrowser: (WeFiBar Toolbar) - {0B876028-B388-4F6D-922F-F52FAEC8535F} - C:\Program Files\WeFiBar\tbWeF1.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\Toolbar\WebBrowser: (LimeWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [Amazing3DAquariumWallpaper] File not found
O4 - HKLM\..\Run: [ezLife] C:\Windows\System32\qjueplzs.dll ()
O4 - HKLM\..\Run: [zpkulydleetxdhle] C:\Windows\System32\aknqvjjjggvqx.dll ()
O4 - HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\..\Run: [RTHDBPL] C:\Users\USER\AppData\Roaming\SystemProc\lsass.exe ()
O4 - HKU\.DEFAULT\..\RunOnce: [] File not found
O4 - HKU\S-1-5-18\..\RunOnce: [] File not found
O4 - HKU\S-1-5-19\..\RunOnce: [] File not found
O4 - HKU\S-1-5-20\..\RunOnce: [] File not found
O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll (SmartShopper Networks)
O16 - DPF: Microsoft XML Parser for Java file:///C:/Windows/Java/classes/xmldso.cab (Reg Error: Key error.)
O20 - AppInit_DLLs: (C:\Windows\System32\dpnet32.dll) - C:\Windows\System32\dpnet32.dll File not found
O20 - AppInit_DLLs: (C:\Windows\System32\dpnet32.dll) - C:\Windows\System32\dpnet32.dll File not found
O20 - AppInit_DLLs: (C:\Windows\System32\dimsroam32.dll) - C:\Windows\System32\dimsroam32.dll File not found
O20 - Winlogon\Notify\30cf2dae509: DllName - C:\Windows\System32\dpnet32.dll - C:\Windows\System32\dpnet32.dll File not found
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010/03/24 01:08:42 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- File not found
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk /r \??\F:) - File not found
O34 - HKLM BootExecute: (autocheck autochk /p \??\H:) - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
[2010/04/15 12:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\ShoppingReport
[2010/04/15 12:42:39 | 000,000,000 | ---D | C] -- C:\Program Files\Hotbar
[2010/04/11 14:48:51 | 000,000,000 | ---D | C] -- C:\Program Files\Smart-Ads-Solutions
[2010/04/11 14:48:47 | 000,000,000 | ---D | C] -- C:\Program Files\ezLife
[2010/03/24 14:59:10 | 000,000,000 | ---D | C] -- C:\Users\USER\AppData\Local\AskToolbar
[2010/03/24 14:58:48 | 000,000,000 | ---D | C] -- C:\ProgramData\50154185
[2010/03/24 14:58:33 | 000,000,000 | -HSD | C] -- C:\Users\USER\AppData\Roaming\SystemProc
[2010/03/24 14:42:43 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com
[2010/02/22 08:19:54 | 000,405,504 | ---- | C] (pion) -- C:\Users\USER\AppData\Local\jesgkg.exe
[2009/10/27 09:58:43 | 000,385,024 | ---- | C] (Rousseau) -- C:\Users\USER\AppData\Local\vvvvdfdl.exe
[2010/04/17 19:46:58 | 000,048,272 | ---- | M] () -- C:\Windows\System32\wptzdgwraer.exe
[2010/04/15 12:36:45 | 000,111,789 | ---- | M] () -- C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe
[2010/04/15 06:47:06 | 000,387,584 | ---- | M] () -- C:\Windows\System32\_aknqvjjjggvqx.dll
[2010/04/14 14:08:02 | 000,000,051 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest
[2010/04/14 14:07:39 | 000,002,039 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest
[2010/04/14 14:07:39 | 000,000,011 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest
[2010/04/14 14:07:39 | 000,000,011 | -HS- | M] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest
[2010/04/13 17:13:12 | 001,331,200 | ---- | M] () -- C:\Windows\System32\GV3r3A.dll
[2010/03/27 07:39:58 | 000,000,817 | ---- | M] () -- C:\ProgramData\818884014
[2010/03/26 15:28:46 | 000,000,729 | -HS- | M] () -- C:\ProgramData\1621065214
[2010/03/25 18:55:18 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dhcpcsvc32.dll
[2010/03/25 16:56:03 | 000,202,752 | ---- | M] () -- C:\Windows\System32\fdBthProxy32.dll
[2010/03/25 15:56:13 | 000,202,752 | ---- | M] () -- C:\Windows\System32\dbnmpntw32.dll
[2010/03/25 15:26:50 | 000,003,734 | ---- | M] () -- C:\Windows\GnuHashes.ini
[2010/03/24 14:41:03 | 000,001,700 | ---- | M] () -- C:\Users\USER\Desktop\LimeWire 5.5.7.lnk
[2010/04/15 12:36:45 | 000,111,789 | ---- | C] () -- C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe
[2010/04/13 17:13:12 | 001,331,200 | ---- | C] () -- C:\Windows\System32\GV3r3A.dll
[2010/04/11 14:48:50 | 000,048,272 | ---- | C] () -- C:\Windows\System32\wptzdgwraer.exe
[2010/03/25 18:55:18 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dhcpcsvc32.dll
[2010/03/25 16:55:57 | 000,202,752 | ---- | C] () -- C:\Windows\System32\fdBthProxy32.dll
[2010/03/25 15:56:12 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dbnmpntw32.dll
[2010/03/24 16:58:41 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dwmapi32.dll
[2010/03/24 15:58:40 | 000,202,752 | ---- | C] () -- C:\Windows\System32\dtsh32.dll
[2010/03/24 15:06:25 | 000,003,734 | ---- | C] () -- C:\Windows\GnuHashes.ini
[2010/03/24 14:58:31 | 000,110,080 | ---- | C] () -- C:\Windows\System32\dplayx32.dll
[2010/03/24 14:58:29 | 000,203,264 | ---- | C] () -- C:\Windows\System32\dot3gpclnt32.dll
[2010/03/24 14:58:27 | 000,116,736 | ---- | C] () -- C:\Windows\System32\dnssd32.dll
[2010/03/24 14:58:27 | 000,002,039 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest
[2010/03/24 14:58:27 | 000,000,051 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest
[2010/03/24 14:58:27 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest
[2010/03/24 14:58:27 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest
[2010/03/24 14:41:03 | 000,001,700 | ---- | C] () -- C:\Users\USER\Desktop\LimeWire 5.5.7.lnk
[2010/03/17 09:08:08 | 000,496,640 | ---- | C] () -- C:\Windows\System32\aknqvjjjggvqx.dll
[2010/03/17 09:08:08 | 000,387,584 | ---- | C] () -- C:\Windows\System32\_aknqvjjjggvqx.dll
[2010/03/14 05:29:42 | 000,297,984 | ---- | C] () -- C:\Windows\System32\vldgpkus.dll
[2010/03/14 05:29:14 | 000,315,392 | ---- | C] () -- C:\Windows\System32\qjueplzs.dll
[2010/03/11 22:30:17 | 000,393,216 | ---- | C] () -- C:\Users\USER\AppData\Local\ldcri.exe
[2010/03/11 10:55:21 | 000,524,288 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms
[2010/03/11 10:55:19 | 000,524,288 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2010/03/11 10:55:17 | 000,065,536 | -HS- | C] () -- C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TM.blf
[2010/03/09 20:02:44 | 000,000,729 | -HS- | C] () -- C:\ProgramData\1621065214
[2010/03/09 20:02:43 | 000,000,817 | ---- | C] () -- C:\ProgramData\818884014
[2010/03/09 20:00:41 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b78fe37
[2010/03/06 02:03:05 | 000,000,050 | ---- | C] () -- C:\Windows\MegaManager.INI
[2010/03/05 16:13:04 | 000,446,464 | ---- | C] () -- C:\Users\USER\AppData\Local\aouicbw.exe
[2010/02/27 10:22:56 | 000,339,968 | ---- | C] () -- C:\Users\USER\AppData\Local\ieokfhd.exe
[2010/02/08 18:40:19 | 010,605,056 | ---- | C] () -- C:\Users\USER\Hygrothermique.ppt
[2010/02/01 21:32:20 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Roaming\wklnhst.dat
[2010/01/14 11:38:28 | 000,000,552 | ---- | C] () -- C:\Users\USER\AppData\Local\d3d8caps.dat
[2010/01/09 09:22:08 | 000,001,372 | ---- | C] () -- C:\Users\USER\AppData\Roaming\N1PqRpBz8wDw3Sk.vbs
[2009/10/19 15:09:10 | 000,005,609 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687C.manifest
[2009/10/19 15:09:10 | 000,002,381 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687P.manifest
[2009/10/19 15:09:10 | 000,000,079 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687O.manifest
[2009/10/19 15:09:10 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef687S.manifest
[2009/09/30 11:28:11 | 000,000,000 | ---- | C] () -- C:\Users\USER\AppData\Local\oeuky_s2m.zl
[2009/09/30 10:08:42 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/09/14 21:54:25 | 000,005,609 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669C.manifest
[2009/09/14 21:54:25 | 000,002,493 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669P.manifest
[2009/09/14 21:54:25 | 000,000,352 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669O.manifest
[2009/09/14 21:54:25 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef669S.manifest
[2009/09/04 22:50:25 | 000,000,008 | ---- | C] () -- C:\Users\USER\AppData\Local\.mpid
[2009/09/04 18:54:38 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms
[2009/09/04 18:54:38 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms
[2009/09/04 18:54:37 | 000,262,144 | ---- | C] () -- C:\ProgramData\ntuser.dat
[2009/09/04 18:54:37 | 000,065,536 | -HS- | C] () -- C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TM.blf
[2009/09/04 18:54:37 | 000,005,120 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG1
[2009/09/04 18:54:37 | 000,000,000 | -H-- | C] () -- C:\ProgramData\ntuser.dat.LOG2
[2009/01/12 12:49:07 | 000,000,090 | ---- | C] () -- C:\Users\USER\AppData\Local\novwdg.bat
[2008/12/19 01:41:13 | 000,001,064 | ---- | C] () -- C:\Windows\Sol.ini
[2008/12/19 01:41:12 | 000,000,982 | ---- | C] () -- C:\Windows\Fa.ini
[2008/12/05 17:18:42 | 000,315,408 | ---- | C] () -- C:\ProgramData\ElseFaceFace.geoscy
[2008/12/05 16:56:33 | 000,090,128 | ---- | C] () -- C:\ProgramData\ElseFaceFace.cjf3uy5
[2008/12/05 16:33:38 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jgdllq
[2008/12/05 16:10:34 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ouqiwk
[2008/12/05 15:48:21 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8hjzj
[2008/12/05 15:26:17 | 000,004,112 | ---- | C] () -- C:\ProgramData\ElseFaceFace.yvpoe7
[2008/12/05 15:04:20 | 000,393,232 | ---- | C] () -- C:\ProgramData\ElseFaceFace.73yav
[2008/12/05 14:42:17 | 000,192,528 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fjeg2f
[2008/12/05 14:20:14 | 000,393,232 | ---- | C] () -- C:\ProgramData\ElseFaceFace.zu7pp
[2008/12/05 13:58:15 | 000,249,872 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6gnj9v3
[2008/12/05 13:36:21 | 000,061,456 | ---- | C] () -- C:\ProgramData\ElseFaceFace.s8vflzc
[2008/12/05 13:14:28 | 000,213,008 | ---- | C] () -- C:\ProgramData\ElseFaceFace.bn5c9g
[2008/12/05 12:52:32 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.gh5gi
[2008/12/05 12:30:37 | 000,147,472 | ---- | C] () -- C:\ProgramData\ElseFaceFace.54tnnl
[2008/12/05 12:08:45 | 000,368,656 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mg3c28
[2008/12/05 11:46:53 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3xoye
[2008/12/05 11:25:00 | 000,229,392 | ---- | C] () -- C:\ProgramData\ElseFaceFace.z9ev4
[2008/12/05 11:03:07 | 000,159,760 | ---- | C] () -- C:\ProgramData\ElseFaceFace.dpse74h
[2008/12/05 10:41:14 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6dtvy83
[2008/12/05 10:19:18 | 000,311,312 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2gd30l
[2008/12/05 09:57:22 | 000,237,584 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jhd9zk
[2008/12/05 09:35:21 | 000,139,280 | ---- | C] () -- C:\ProgramData\ElseFaceFace.c62gi
[2008/12/05 09:13:03 | 000,102,416 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ekehpb
[2008/12/05 08:50:43 | 000,282,640 | ---- | C] () -- C:\ProgramData\ElseFaceFace.jyh6j
[2008/12/05 08:28:39 | 000,192,528 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ygzcx
[2008/12/05 08:06:40 | 000,319,504 | ---- | C] () -- C:\ProgramData\ElseFaceFace.nu9isun
[2008/12/05 07:44:33 | 000,065,552 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tnykn
[2008/12/05 07:22:31 | 000,126,992 | ---- | C] () -- C:\ProgramData\ElseFaceFace.zmtdh
[2008/12/05 07:00:33 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lmj6he
[2008/12/05 06:38:34 | 000,245,776 | ---- | C] () -- C:\ProgramData\ElseFaceFace.305fb9
[2008/12/05 06:16:31 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9lkggq
[2008/12/05 05:54:37 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ocuufh
[2008/12/05 05:32:29 | 000,352,272 | ---- | C] () -- C:\ProgramData\ElseFaceFace.wyfhbp
[2008/12/05 05:10:29 | 000,159,760 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mva3r
[2008/12/05 04:48:26 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mzjbosq
[2008/12/05 04:26:34 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.eun5iv
[2008/12/05 04:04:41 | 000,163,856 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0cn2xi7
[2008/12/05 03:42:48 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hq4qq1
[2008/12/05 03:20:56 | 000,143,376 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ampj4c
[2008/12/05 02:59:03 | 000,040,976 | ---- | C] () -- C:\ProgramData\ElseFaceFace.eghqwo
[2008/12/05 02:37:11 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9fw58
[2008/12/05 02:15:18 | 000,049,168 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3w1e9
[2008/12/05 01:53:26 | 000,294,928 | ---- | C] () -- C:\ProgramData\ElseFaceFace.b38f1
[2008/12/05 01:31:34 | 000,299,024 | ---- | C] () -- C:\ProgramData\ElseFaceFace.r2tjb
[2008/12/05 01:09:41 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.cd9wj77
[2008/12/05 00:47:42 | 000,032,784 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lpz00
[2008/12/05 00:25:46 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.6pail
[2008/12/04 21:52:47 | 000,335,888 | ---- | C] () -- C:\ProgramData\ElseFaceFace.slp9sni
[2008/12/04 21:30:31 | 000,262,160 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3r0ysb3
[2008/12/04 21:08:37 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.t3q7xv
[2008/12/04 20:46:44 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.67je0
[2008/12/04 20:24:33 | 000,032,784 | ---- | C] () -- C:\ProgramData\ElseFaceFace.l3qcor
[2008/12/04 20:02:37 | 000,311,312 | ---- | C] () -- C:\ProgramData\ElseFaceFace.16unasi
[2008/12/04 19:40:32 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.w7n3esr
[2008/12/04 19:16:49 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.38d8dt
[2008/12/04 18:54:09 | 000,094,224 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ex40kap
[2008/12/04 18:31:23 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.j1nkqe
[2008/12/04 18:08:57 | 000,225,296 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2m4zh2z
[2008/12/04 17:46:53 | 000,352,272 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tn2qi
[2008/12/04 17:24:49 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.kl2p4o
[2008/12/04 17:24:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8ae53219b1eed16
[2008/12/04 17:24:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a4aa909277f05902
[2008/12/04 17:24:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\63748b7d2b6a3a01
[2008/12/04 17:24:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c27cbd49e0593881
[2008/12/04 17:23:58 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bfc7de68dd119e54
[2008/12/04 17:23:53 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dee3fc7f8527d0b
[2008/12/04 17:23:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ac981666fc7e19ba
[2008/12/04 17:23:43 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\23f24f37844e129
[2008/12/04 17:23:38 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\455684d9ac97afeb
[2008/12/04 17:23:33 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e72946d2b6e66723
[2008/12/04 17:23:28 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b28d1a6893f522a3
[2008/12/04 17:23:23 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a6eef0b317873ff
[2008/12/04 17:23:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4a583c3f18ce7599
[2008/12/04 17:23:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ffdb1fd48f6810b8
[2008/12/04 17:23:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f7cc7c04fec9228
[2008/12/04 17:23:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\66eb6ca31a0ecea0
[2008/12/04 17:22:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5de7b8c4db83779f
[2008/12/04 17:22:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94119a4d861604b9
[2008/12/04 17:22:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\439f3b1b58212554
[2008/12/04 17:22:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d3078ffd7892197
[2008/12/04 17:22:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7943c4a2493487d6
[2008/12/04 17:22:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16e9455483666708
[2008/12/04 17:22:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3a99cce6c8ba595d
[2008/12/04 17:22:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a246c9722939aaa0
[2008/12/04 17:22:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\541677ea5c785984
[2008/12/04 17:22:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\443ca76a215599c6
[2008/12/04 17:22:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4dfb11e78b364215
[2008/12/04 17:22:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e57516d26016ae5d
[2008/12/04 17:21:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\85b7dcfbae225d42
[2008/12/04 17:21:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e304b69479921f1f
[2008/12/04 17:21:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8045f51617523ce1
[2008/12/04 17:02:47 | 000,057,360 | ---- | C] () -- C:\ProgramData\ElseFaceFace.g7b8ww
[2008/12/04 16:40:38 | 000,258,064 | ---- | C] () -- C:\ProgramData\ElseFaceFace.pm4kwy
[2008/12/04 16:18:39 | 000,008,208 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tmh4kgs
[2008/12/04 15:56:38 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8ewfdrw
[2008/12/04 15:34:27 | 000,016,400 | ---- | C] () -- C:\ProgramData\ElseFaceFace.vhsc3sx
[2008/12/04 15:12:23 | 000,040,976 | ---- | C] () -- C:\ProgramData\ElseFaceFace.494hg
[2008/12/04 14:50:26 | 000,094,224 | ---- | C] () -- C:\ProgramData\ElseFaceFace.oxhuah
[2008/12/04 14:28:29 | 000,233,488 | ---- | C] () -- C:\ProgramData\ElseFaceFace.82cou
[2008/12/04 14:06:33 | 000,397,328 | ---- | C] () -- C:\ProgramData\ElseFaceFace.o3860
[2008/12/04 13:44:36 | 000,360,464 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tl69au
[2008/12/04 13:22:38 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.tucoj
[2008/12/04 13:00:43 | 000,221,200 | ---- | C] () -- C:\ProgramData\ElseFaceFace.071ko1v
[2008/12/04 12:38:39 | 000,335,888 | ---- | C] () -- C:\ProgramData\ElseFaceFace.nm3hcby
[2008/12/04 12:16:37 | 000,274,448 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8qvu0u
[2008/12/04 11:54:25 | 000,208,912 | ---- | C] () -- C:\ProgramData\ElseFaceFace.t9r3l
[2008/12/04 11:32:04 | 000,385,040 | ---- | C] () -- C:\ProgramData\ElseFaceFace.juwb1
[2008/12/04 11:10:03 | 000,299,024 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8e2vuob
[2008/12/04 10:48:05 | 000,081,936 | ---- | C] () -- C:\ProgramData\ElseFaceFace.r27p4q0
[2008/12/04 10:26:01 | 000,253,968 | ---- | C] () -- C:\ProgramData\ElseFaceFace.m1llv
[2008/12/04 10:04:02 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ae6fi
[2008/12/04 09:42:01 | 000,069,648 | ---- | C] () -- C:\ProgramData\ElseFaceFace.bw6h00s
[2008/12/04 09:13:55 | 000,086,032 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fruljw
[2008/12/04 08:51:46 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.plee9
[2008/12/04 08:29:41 | 000,053,264 | ---- | C] () -- C:\ProgramData\ElseFaceFace.l2u6jl
[2008/12/04 08:07:39 | 000,024,592 | ---- | C] () -- C:\ProgramData\ElseFaceFace.k77sj5q
[2008/12/04 07:45:35 | 000,389,136 | ---- | C] () -- C:\ProgramData\ElseFaceFace.alxcn
[2008/12/04 07:23:37 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.m74ic
[2008/12/04 07:01:38 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.erx5p
[2008/12/04 06:39:39 | 000,098,320 | ---- | C] () -- C:\ProgramData\ElseFaceFace.luj5g1
[2008/12/04 06:16:08 | 000,278,544 | ---- | C] () -- C:\ProgramData\ElseFaceFace.874lwiq
[2008/12/04 05:54:02 | 000,102,416 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ui51j
[2008/12/04 05:32:05 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.sdiotm
[2008/12/04 05:09:57 | 000,118,800 | ---- | C] () -- C:\ProgramData\ElseFaceFace.n7d8tx
[2008/12/04 04:47:57 | 000,143,376 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8i9x2
[2008/12/04 04:26:00 | 000,405,520 | ---- | C] () -- C:\ProgramData\ElseFaceFace.fzpzeax
[2008/12/04 04:04:04 | 000,380,944 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mkh1f
[2008/12/04 03:42:02 | 000,188,432 | ---- | C] () -- C:\ProgramData\ElseFaceFace.f0e9x0
[2008/12/04 03:20:07 | 000,151,568 | ---- | C] () -- C:\ProgramData\ElseFaceFace.2vr4n
[2008/12/04 02:58:14 | 000,020,496 | ---- | C] () -- C:\ProgramData\ElseFaceFace.h0oetim
[2008/12/04 02:36:21 | 000,348,176 | ---- | C] () -- C:\ProgramData\ElseFaceFace.wtojhw
[2008/12/04 02:14:28 | 000,278,544 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ggd5eoa
[2008/12/04 01:52:35 | 000,258,064 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0k627
[2008/12/04 01:30:42 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.lr3vvf
[2008/12/04 01:08:48 | 000,135,184 | ---- | C] () -- C:\ProgramData\ElseFaceFace.9x55bs8
[2008/12/04 00:46:47 | 000,270,352 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3njq9o
[2008/12/04 00:24:48 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.dwumvs
[2008/12/03 21:39:10 | 000,180,240 | ---- | C] () -- C:\ProgramData\ElseFaceFace.mhkyiq
[2008/12/03 21:17:15 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.0ih1k
[2008/12/03 20:55:20 | 000,376,848 | ---- | C] () -- C:\ProgramData\ElseFaceFace.swi6c36
[2008/12/03 20:33:21 | 000,028,688 | ---- | C] () -- C:\ProgramData\ElseFaceFace.q2d51
[2008/12/03 20:11:18 | 000,155,664 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ungi4sq
[2008/12/03 19:49:19 | 000,249,872 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8j6qcu7
[2008/12/03 19:27:24 | 000,327,696 | ---- | C] () -- C:\ProgramData\ElseFaceFace.vqbt7t
[2008/12/03 19:05:28 | 000,106,512 | ---- | C] () -- C:\ProgramData\ElseFaceFace.h97oi6r
[2008/12/03 18:43:17 | 000,241,680 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ugqyij
[2008/12/03 18:21:23 | 000,000,016 | ---- | C] () -- C:\ProgramData\ElseFaceFace.afu6yv
[2008/12/03 17:59:28 | 000,294,928 | ---- | C] () -- C:\ProgramData\ElseFaceFace.g8wfama
[2008/12/03 17:37:30 | 000,069,648 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ac2pf
[2008/12/03 17:15:28 | 000,057,360 | ---- | C] () -- C:\ProgramData\ElseFaceFace.3cdvf
[2008/12/03 16:53:26 | 000,323,600 | ---- | C] () -- C:\ProgramData\ElseFaceFace.8li6a
[2008/12/03 16:45:41 | 000,213,008 | ---- | C] () -- C:\ProgramData\axis enc body.33qk5id
[2008/12/03 16:44:42 | 000,348,176 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ou7pqvr
[2008/12/03 16:44:41 | 000,196,624 | ---- | C] () -- C:\ProgramData\ElseFaceFace.yuwwwcy
[2008/12/03 16:31:24 | 000,303,120 | ---- | C] () -- C:\ProgramData\ElseFaceFace.qjqvqw7
[2008/12/03 16:09:09 | 000,270,352 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hzwsn
[2008/12/03 15:46:54 | 000,004,112 | ---- | C] () -- C:\ProgramData\ElseFaceFace.hyzys
[2008/12/01 22:36:43 | 000,114,704 | ---- | C] () -- C:\ProgramData\ElseFaceFace.gfkel2
[2008/12/01 15:04:54 | 000,077,840 | ---- | C] () -- C:\ProgramData\ElseFaceFace.quf5j
[2008/12/01 14:43:49 | 000,225,296 | ---- | C] () -- C:\ProgramData\ElseFaceFace.sc6ot
[2008/12/01 14:23:56 | 000,356,368 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ta82lbe
[2008/12/01 14:00:45 | 000,118,800 | ---- | C] () -- C:\ProgramData\ElseFaceFace.ud08hjx
[2008/11/29 14:05:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\81000b0a3e1b5479
[2008/11/29 14:05:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c8a308c8296a230
[2008/11/29 14:04:28 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5e723a73a4a5025a
[2008/11/29 14:04:23 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cdbc80166fcf9641
[2008/11/29 14:04:18 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b3e1f6b621bde6cc
[2008/11/29 14:04:13 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d77870e5cfb5237
[2008/11/29 14:04:08 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\62cc9819fd6ccc1f
[2008/11/29 14:04:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9153140e6cf778ee
[2008/11/29 14:03:58 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7e38d3a28d2da224
[2008/11/29 14:03:53 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\226fdc4c43913361
[2008/11/29 14:03:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a8bbb26068d04ec4
[2008/11/29 14:03:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7147d737a238a936
[2008/11/29 14:03:33 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a8f3b8552939c9ef
[2008/11/29 14:03:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\96736d621498270f
[2008/11/29 14:03:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5cab63de464afef0
[2008/11/29 14:03:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d6d30338c05225f
[2008/11/29 14:03:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2f63163b8f715a4f
[2008/11/29 14:03:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9d7b3eb5b513024
[2008/11/29 14:03:03 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ca570e929b61843a
[2008/11/29 14:03:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bd04fc2999f797a2
[2008/11/29 13:53:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f96f47983ea947c7
[2008/11/29 13:53:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\607383dbccb59b2e
[2008/11/29 13:53:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fef12f37dcb948ad
[2008/11/29 13:53:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\40223987c0cebab7
[2008/11/29 13:53:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d3b7710c893b3306
[2008/11/29 13:53:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95d5a7cb9a6e79c5
[2008/11/29 13:53:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b30c98a2ff27c30e
[2008/11/29 13:52:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c6ae86324a061b1
[2008/11/29 13:52:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a155e66e3aab6ad9
[2008/11/29 13:52:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d3f427fa42be82f3
[2008/11/29 13:52:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6e4b6a442fe0e193
[2008/11/29 13:52:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e3036fbf5aae0bfe
[2008/11/29 13:49:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d4213771cb3525c1
[2008/11/29 13:48:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a3346eda4b0cfd4
[2008/11/29 13:48:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c7b35d06af4bfb8d
[2008/11/29 13:48:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\831b208a88e93360
[2008/11/29 13:48:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a985ccb733c25101
[2008/11/29 13:48:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2bfae833c7fc1064
[2008/11/29 13:48:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\37213bd7aaad2c35
[2008/11/29 13:48:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\41f8481da531d0be
[2008/11/29 13:48:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\28aa687f8110de6
[2008/11/29 13:48:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2bd50dd748c183a5
[2008/11/29 13:48:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6711ecaa1d825f6b
[2008/11/29 13:48:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\efdb813b65a9cee4
[2008/11/29 13:47:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d1f34e9ecd359e21
[2008/11/29 13:47:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f58978b65c6d65cc
[2008/11/29 13:47:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4bb18495e17576b3
[2008/11/29 13:47:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\87fb543eb0412b5
[2008/11/29 13:47:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f8668ca0a9e1d131
[2008/11/29 13:47:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dd8e81e4fedb3430
[2008/11/29 13:47:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64d7ccaa8130fb5f
[2008/11/29 13:47:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5997e9adac5f0635
[2008/11/29 13:47:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e9a66a88bf33f0
[2008/11/29 13:47:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d4c55b0d4dc57b8e
[2008/11/29 13:47:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df14af5f167b0200
[2008/11/29 13:47:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9719e94dd2b95c9
[2008/11/29 13:46:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\40fb8eaf21bf5131
[2008/11/29 13:46:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4365ceb689db76b7
[2008/11/29 13:46:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d7dc1d79cc6c3732
[2008/11/29 13:46:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f05a3654f9bf3d9
[2008/11/29 13:44:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e15c94812b106eb
[2008/11/29 13:44:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c85b04e14f0a4258
[2008/11/29 13:44:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9ce5d3e945f7d2e
[2008/11/29 13:44:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f20c5eb8c3a40b
[2008/11/29 13:44:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9b62ee65d0d84035
[2008/11/29 13:44:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e1bffeedd341166
[2008/11/29 13:43:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a12bbe72ff31b169
[2008/11/29 13:43:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e6ed99d7dffe300c
[2008/11/29 13:43:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df2be60059e8dfd8
[2008/11/29 13:43:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\afd7c747f81f9f23
[2008/11/29 13:43:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\70042177892a4e9c
[2008/11/29 13:43:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\30917d2e58b7327a
[2008/11/29 13:43:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\42be9fd7c4471cf9
[2008/11/29 13:43:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\158f3657a04ab2e
[2008/11/29 13:43:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a963a81567f2b7ed
[2008/11/29 13:43:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a71eb07adcdf08b2
[2008/11/29 13:43:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\49a8d5c820219a19
[2008/11/29 13:42:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f3cb3f74c1f9f76
[2008/11/29 13:42:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a9d6154efe318fb0
[2008/11/29 13:42:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c034723b90e4e009
[2008/11/29 13:42:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5426b210899405e5
[2008/11/29 13:42:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9e0780f17c0291bb
[2008/11/29 13:42:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b00c9f79c33a1b63
[2008/11/29 13:42:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6ae4f97c1c97afe6
[2008/11/29 13:42:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5cd6e9d637cd1fcb
[2008/11/29 13:42:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f3717a7a2dca1b40
[2008/11/29 13:42:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\932c8bbeb7795c87
[2008/11/29 13:42:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\496defadf08ee227
[2008/11/29 13:41:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c7245dc4af2a06bd
[2008/11/29 13:41:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c19731da185601a2
[2008/11/29 13:41:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bc9b86c370399662
[2008/11/29 13:41:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9002cb1dcf613c87
[2008/11/29 13:41:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\32b98aa5c4ceb68d
[2008/11/29 13:41:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\df2a491171043ae0
[2008/11/29 13:41:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f526c83cf511cb6b
[2008/11/29 13:41:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\eddeaaeb754dcbfa
[2008/11/29 13:41:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e213366115a84aa9
[2008/11/29 13:41:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b0999dcac3a66073
[2008/11/29 13:41:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64f8c16ecdd270f4
[2008/11/29 13:41:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c57445598e43466c
[2008/11/29 13:40:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95111046d0d304c1
[2008/11/29 13:40:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7962a6edb2f537ad
[2008/11/29 13:40:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\632fc5dd2e07218d
[2008/11/29 13:39:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d0de657e686e3b43
[2008/11/29 13:39:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\84bdac14aba299e
[2008/11/29 13:39:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3fde5be5c3ce6b1b
[2008/11/29 13:39:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6c08d988874a2200
[2008/11/29 13:38:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9f3e768bbe9b067e
[2008/11/29 13:38:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\84949b0d1d3b5d5
[2008/11/29 13:38:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94803ae16c7d076f
[2008/11/29 13:38:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\693bdb6f4a5603f6
[2008/11/29 13:38:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bbd6c33be8bcb4f9
[2008/11/29 13:38:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a45e1bcab32bf3a2
[2008/11/29 13:38:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7829c672969947cd
[2008/11/29 13:38:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c672d4a2d1edcc74
[2008/11/29 13:38:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ec94ab6994cdef5d
[2008/11/29 13:38:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\19b75171f4a946d1
[2008/11/29 13:38:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d9fa1368a991a610
[2008/11/29 13:38:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\25f30a79d9ea960e
[2008/11/29 13:37:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cf9e147692b5a229
[2008/11/29 13:37:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\82ccbe49fdc23519
[2008/11/29 13:37:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\571d64ffa12ad06d
[2008/11/29 13:37:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16f9263f268ad3df
[2008/11/29 13:37:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\997abb3a2234a6c9
[2008/11/29 13:37:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\678326e9af28a6d1
[2008/11/29 13:37:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64b765d6d79b199
[2008/11/29 13:37:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e6afa1a3323b86
[2008/11/29 13:37:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f8d03d2ff70c096
[2008/11/29 13:37:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b57910d21bd9eb35
[2008/11/29 13:37:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\64e6c896722a582e
[2008/11/29 13:36:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c60ac4f7b2a8d72
[2008/11/29 13:36:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\97a429078c9f418b
[2008/11/29 13:36:48 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\eb1cab14f460f9ce
[2008/11/29 13:35:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\de3dc8b97df2db20
[2008/11/29 13:34:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ee99a63c590d75a
[2008/11/29 13:34:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e304e64ba36b9540
[2008/11/29 13:34:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b11e149124a34b5
[2008/11/29 13:34:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1342a7ee9dc2c00
[2008/11/29 13:34:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5d6eb93719638f21
[2008/11/29 13:34:37 | 000,001,006 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509C.manifest
[2008/11/29 13:34:37 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509S.manifest
[2008/11/29 13:34:37 | 000,000,011 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509O.manifest
[2008/11/29 13:34:36 | 000,000,799 | -HS- | C] () -- C:\Users\USER\AppData\Roaming\020000000e3e68ef509P.manifest
[2008/11/29 13:34:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5709554123b2b5db
[2008/11/29 13:34:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\71b937d425f041ba
[2008/11/29 13:34:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b09baf3d1431dba
[2008/11/29 13:34:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fd712e7f41b73f4e
[2008/11/29 13:34:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8f1cf5fa567a5bb9
[2008/11/29 13:34:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c748aa5094abe140
[2008/11/29 13:34:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c9405b3dd4f2e16e
[2008/11/29 13:33:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\211c25d295e34c41
[2008/11/29 13:33:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c02aff622a077c93
[2008/11/29 13:33:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\90f807bed1ff3633
[2008/11/29 13:33:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5c7bf7bbc2922c81
[2008/11/29 13:33:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f0bba271186ba3a4
[2008/11/29 13:33:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b350ecfe33fe942d
[2008/11/29 13:33:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\183124fab7d6d386
[2008/11/29 13:33:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\55326966926e809
[2008/11/29 13:33:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\607560457b2a79b7
[2008/11/29 13:33:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a3028b173f84abfa
[2008/11/29 13:33:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\71c948d57de9c1da
[2008/11/29 13:33:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\95615a1c50af2930
[2008/11/29 13:32:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\97bee691cb88c40d
[2008/11/29 13:32:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\90f61ffa2ab46973
[2008/11/29 13:32:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1654dfd01562b4bb
[2008/11/29 13:32:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\22a055e54fad2234
[2008/11/29 13:32:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c065a6fd3e0101a1
[2008/11/29 13:32:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\514637d29895303e
[2008/11/29 13:32:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ad75888fb368abf0
[2008/11/29 13:31:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c3ac91a8d3c5c67
[2008/11/29 13:31:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ce9a8fd21a5f866
[2008/11/29 13:31:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\81666ab8e8ccfdfc
[2008/11/29 13:31:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c8e0576a1ce41d9
[2008/11/29 13:31:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\202a4b489b915b6f
[2008/11/29 13:31:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2f2b2927f3cd0d63
[2008/11/29 13:31:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\34afa5d0b6134931
[2008/11/29 13:31:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6b0c2283a4670d4c
[2008/11/29 13:31:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ea9ca2ac1c5be192
[2008/11/29 13:31:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4148a5cbafa84866
[2008/11/29 13:31:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5a2cb362f4ee318c
[2008/11/29 13:31:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7bdbf60e9b94c076
[2008/11/29 13:30:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\249e8293eb0d7fbf
[2008/11/29 13:30:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\51955b9dd2a0b97c
[2008/11/29 13:30:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\851bbfbfc58b4b2
[2008/11/29 13:30:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b92aec11e808ad45
[2008/11/29 13:30:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a59af8adc1732d53
[2008/11/29 13:30:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7d69ed4cc597d32e
[2008/11/29 13:30:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a14e10aab9c12130
[2008/11/29 13:30:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e950b70c7e0d77f4
[2008/11/29 13:30:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\f82875f89c4238c7
[2008/11/29 13:30:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1efcd075191c813f
[2008/11/29 13:30:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\175f22d3772b7138
[2008/11/29 13:30:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\850f0a9491941057
[2008/11/29 13:29:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dcba4698878d6e
[2008/11/29 13:29:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ce252cdaa8c30fc
[2008/11/29 13:29:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fbc3090944e42ecc
[2008/11/29 13:29:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\63d4155249ab0c16
[2008/11/29 13:29:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\60ffd288e1053a57
[2008/11/29 13:29:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\bb57cc0374d4d737
[2008/11/29 13:29:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1fbf1acfb76638ac
[2008/11/29 13:28:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ddf6cd83d824b7c8
[2008/11/29 13:28:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9ad40c6c20ab6560
[2008/11/29 13:28:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2b6ecaff50646d2
[2008/11/29 13:28:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\3b1565f097fe7506
[2008/11/29 13:28:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\773c10b7b60c00b8
[2008/11/29 13:28:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2b1f8babd0e2f51d
[2008/11/29 13:28:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\857da7d1d020e27d
[2008/11/29 13:28:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1dd7e2701c1d0278
[2008/11/29 13:28:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6fffb7aa771b887
[2008/11/29 13:27:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\91d430f635efc2f4
[2008/11/29 13:27:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5a7820e6a1b123dd
[2008/11/29 13:27:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c23e28f5f5177915
[2008/11/29 13:27:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9cfc4f6bf13b8b1c
[2008/11/29 13:27:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\121cec4d48f4672c
[2008/11/29 13:27:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b292b294d238410e
[2008/11/29 13:27:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\dccec97b9b4f6d83
[2008/11/29 13:27:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b993c3f1a1865a6d
[2008/11/29 13:27:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\baa67626feaf5313
[2008/11/29 13:26:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\58eb79fa8b7e5a49
[2008/11/29 13:26:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\cfe2c94aa76a879e
[2008/11/29 13:26:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1c13f2c2ed466037
[2008/11/29 13:26:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\41fd8baf4c989b57
[2008/11/29 13:26:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\602bded9b93c79b
[2008/11/29 13:26:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1638af5739b7668f
[2008/11/29 13:26:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8ecde917efae92ea
[2008/11/29 13:26:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4397ebb898f18c02
[2008/11/29 13:26:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\44cf44449658d6e2
[2008/11/29 13:26:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7292e95413e193ee
[2008/11/29 13:26:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\39ba158b23762ee6
[2008/11/29 13:25:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\d6e8a89b56427767
[2008/11/29 13:25:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b0596280536b364
[2008/11/29 13:25:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7dd532461b0b061e
[2008/11/29 13:25:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1cd91b942a6e58dc
[2008/11/29 13:25:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4c84dc85907e64d
[2008/11/29 13:24:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4e8c2182f0c81563
[2008/11/29 13:24:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\fa271e12429cbb8
[2008/11/29 13:24:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6c4268aa7fb500c6
[2008/11/29 13:24:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9c6dd0792afccd45
[2008/11/29 13:24:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4b22e99e16cf8e12
[2008/11/29 13:24:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2ac1e342a2899350
[2008/11/29 13:24:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8210bea8f436bac0
[2008/11/29 13:24:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\968f9d7c8e0ca650
[2008/11/29 13:24:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\825e3b8ccd8eae
[2008/11/29 13:24:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6ccc688b78b7ba93
[2008/11/29 13:24:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6f38e9ac7e80959c
[2008/11/29 13:23:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\88b69beaaa23c92e
[2008/11/29 13:23:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\547480cc81fd0305
[2008/11/29 13:23:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b5ef6c0e6487eab6
[2008/11/29 13:23:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4b35ed0a7639b445
[2008/11/29 13:23:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a2b1f7c2a1932b3b
[2008/11/29 13:23:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\43ac3b87b6282f6e
[2008/11/29 13:23:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\da91f306c228a0a7
[2008/11/29 13:23:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4915ad929379195
[2008/11/29 13:23:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\ca3e99288120348
[2008/11/29 13:23:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\6544c7261e491d5
[2008/11/29 13:23:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\403606b932c1a5d0
[2008/11/29 13:23:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\298d3e0da54faac0
[2008/11/29 13:22:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\5f6801efce392878
[2008/11/29 13:22:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c99b81a5914b1806
[2008/11/29 13:22:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9fe66e7d69e7634
[2008/11/29 13:22:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1d0df36b4499fc9f
[2008/11/29 13:22:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\936a24359273c99b
[2008/11/29 13:22:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\82154fb8ee96da80
[2008/11/29 13:22:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\16e4d3a901855a7
[2008/11/29 13:22:26 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b18b717f2dd2d98a
[2008/11/29 13:22:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\22ea20dec720b648
[2008/11/29 13:22:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\e63c9ee3e79ab40a
[2008/11/29 13:21:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\94d778aa18f5408
[2008/11/29 13:21:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4144045d1fddfdee
[2008/11/29 13:21:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\1907f7d24e654a7c
[2008/11/29 13:21:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\a9db0a08e95168b2
[2008/11/29 13:21:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\de8ad9a6c8cc903
[2008/11/29 13:21:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\597a09811ead352
[2008/11/29 13:21:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\30b950a5926376d2
[2008/11/29 13:21:22 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\8f072f9d807bb955
[2008/11/29 13:21:17 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7ec9a8e09f959a17
[2008/11/29 13:21:12 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\b3c751a27ff5338c
[2008/11/29 13:21:07 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\afa3124e1d2eda5
[2008/11/29 13:21:02 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\2d5cf18fce46cf19
[2008/11/29 13:20:57 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\c9d7ce0a578200cd
[2008/11/29 13:20:52 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\9aa7954066aa5e50
[2008/11/29 13:20:47 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\10e36a4c1c7517af
[2008/11/29 13:20:42 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\785f6e01a77828d
[2008/11/29 13:20:37 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\100515f68ccd45ee
[2008/11/29 13:20:32 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\7765b015ef1b2228
[2008/11/29 13:20:27 | 000,003,262 | ---- | C] () -- C:\Users\USER\AppData\Roaming\4111af44b0f9246d
[2009/07/02 17:06:14 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\fltk.org
[2010/04/17 20:54:38 | 000,000,000 | ---D | M] -- C:\Users\USER\AppData\Roaming\LimeWire
[2010/03/24 14:58:33 | 000,000,000 | -HSD | M] -- C:\Users\USER\AppData\Roaming\SystemProc
[2007/11/07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

/!\ ne te trompe pas >> Cliques sur l'icône "Run Fix" (en haut à gauche) surtout pas sur "runscan"
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

@++

nanoua971 · le 20 Avr 2010 01:56

========== FILES ==========
C:\Program Files\Common Files\BOONTY Shared\Service folder moved successfully.
C:\Program Files\Common Files\BOONTY Shared folder moved successfully.
C:\Program Files\WeFiBar folder moved successfully.
C:\Program Files\mozilla firefox\components\ffxShot.dll moved successfully.
C:\Program Files\mozilla firefox\components\GooglePlusVideosXPCOM.dll moved successfully.
C:\Program Files\mozilla firefox\components\SuperSearchXPCOM.dll moved successfully.
C:\Windows\System32\dhcpcsvc32.dll moved successfully.
C:\PROGRA~1\GOOGLE~1\17.GooglePlusVideos.dll moved successfully.
C:\Windows\System32\aknqvjjjggvqx.dll moved successfully.
File\Folder C:\PROGRA~1\EASYSE~1\BHO\12SUPE~1.DLL not found.
C:\Program Files\ShoppingReport\Bin\2.6.79 folder moved successfully.
C:\Program Files\ShoppingReport\Bin folder moved successfully.
C:\Program Files\ShoppingReport folder moved successfully.
C:\Windows\System32\qjueplzs.dll moved successfully.
C:\Windows\System32\vldgpkus.dll moved successfully.
File\Folder C:\Windows\System32\aknqvjjjggvqx.dll not found.
C:\autoexec.bat moved successfully.
C:\Windows\System32\GV3r3A.dll moved successfully.
C:\Program Files\Ask.com folder moved successfully.
File\Folder C:\Windows\System32\qjueplzs.dll not found.
File\Folder C:\Windows\System32\aknqvjjjggvqx.dll not found.
C:\Users\USER\AppData\Roaming\SystemProc\lsass.exe moved successfully.
C:\Users\USER\AppData\Roaming\SystemProc folder moved successfully.
========== OTL ==========
Service Boonty Games stopped successfully!
Service Boonty Games deleted successfully!
File C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0b876028-b388-4f6d-922f-f52faec8535f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ deleted successfully.
File C:\Program Files\WeFiBar\tbWeF1.dll not found.
HKU\S-1-5-21-2835029756-2867514213-1702218136-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0b876028-b388-4f6d-922f-f52faec8535f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
File C:\Program Files\WeFiBar\tbWeF1.dll not found.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\searchplugin folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\META-INF folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\lib folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\defaults folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\components folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\chrome folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Users\USER\AppData\Roaming\mozilla\Firefox\Profiles\ga50zrw3.default\extensions\toolbar@ask.com folder moved successfully.
C:\Users\USER\AppData\Roaming\Mozilla\FireFox\Profiles\ga50zrw3.default\searchplugins\conduit.xml moved successfully.
File C:\Program Files\mozilla firefox\components\ffxShot.dll not found.
File C:\Program Files\mozilla firefox\components\GooglePlusVideosXPCOM.dll not found.
File C:\Program Files\mozilla firefox\components\SuperSearchXPCOM.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{007B1F64-1403-41E6-80CC-16A6787CA676}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{007B1F64-1403-41E6-80CC-16A6787CA676}\ deleted successfully.
File C:\Windows\System32\dhcpcsvc32.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01677B4B-0610-4814-94A0-5F570DD7A88F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01677B4B-0610-4814-94A0-5F570DD7A88F}\ deleted successfully.
File C:\PROGRA~1\GOOGLE~1\17GOOG~1.DLL not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01DF85E9-89E3-842D-01F6-5AAB21204324}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01DF85E9-89E3-842D-01F6-5AAB21204324}\ deleted successfully.
File C:\Windows\System32\aknqvjjjggvqx.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0286A85D-CD62-43bb-B7A9-A87D1D027160}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0286A85D-CD62-43bb-B7A9-A87D1D027160}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0b876028-b388-4f6d-922f-f52faec8535f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
File C:\Program Files\WeFiBar\tbWeF1.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\ deleted successfully.
File C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{547366DF-BAD6-496C-97BA-95787132ECAD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{547366DF-BAD6-496C-97BA-95787132ECAD}\ deleted successfully.
File C:\Windows\System32\qjueplzs.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8BDA00C9-58A0-492D-A809-D57735C6EB21}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BDA00C9-58A0-492D-A809-D57735C6EB21}\ deleted successfully.
File C:\Windows\System32\vldgpkus.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9fdfa862-2f91-2879-66e0-53f0053076d5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9fdfa862-2f91-2879-66e0-53f0053076d5}\ deleted successfully.
File C:\Windows\System32\GV3r3A.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0b876028-b388-4f6d-922f-f52faec8535f} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0b876028-b388-4f6d-922f-f52faec8535f}\ not found.
File C:\Program Files\WeFiBar\tbWeF1.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B876028-B388-4F6D-922F-F52FAEC8535F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B876028-B388-4F6D-922F-F52FAEC8535F}\ not found.
File C:\Program Files\WeFiBar\tbWeF1.dll not found.
Registry value HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Amazing3DAquariumWallpaper deleted successfully.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
File C:\Windows\System32\qjueplzs.dll not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
File C:\Windows\System32\aknqvjjjggvqx.dll not found.
Registry value HKEY_USERS\S-1-5-21-2835029756-2867514213-1702218136-1000\\Software\Microsoft\Windows\CurrentVersion\Run\\RTHDBPL deleted successfully.
File C:\Users\USER\AppData\Roaming\SystemProc\lsass.exe not found.
Registry value HKEY_USERS\.DEFAULT\\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-18\\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ not found.
Registry value HKEY_USERS\S-1-5-19\\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-20\\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C5428486-50A0-4a02-9D20-520B59A9F9B2}\ not found.
File C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C5428486-50A0-4a02-9D20-520B59A9F9B3}\ not found.
File C:\Program Files\ShoppingReport\Bin\2.6.79\ShoppingReport.dll not found.
File oft XML Parser for Java file:///C:/Windows/Java/classes/xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\Windows\System32\dpnet32.dll deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\Windows\System32\dpnet32.dll deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\Windows\System32\dimsroam32.dll deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\30cf2dae509\ deleted successfully.
File C:\autoexec.bat not found.
File not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be3ce38c-7a5b-11da-96a4-806e6f6e6963}\ not found.
File D:\setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D\ not found.
File D:\setup.exe not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk /r \??\F: deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk /p \??\H: deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
FastUserSwitchingCompatibility removed from NetSvcs value successfully!
Nla removed from NetSvcs value successfully!
Ntmssvc removed from NetSvcs value successfully!
NWCWorkstation removed from NetSvcs value successfully!
Nwsapagent removed from NetSvcs value successfully!
SRService removed from NetSvcs value successfully!
WmdmPmSp removed from NetSvcs value successfully!
LogonHours removed from NetSvcs value successfully!
PCAudit removed from NetSvcs value successfully!
helpsvc removed from NetSvcs value successfully!
uploadmgr removed from NetSvcs value successfully!
Folder C:\Program Files\ShoppingReport\ not found.
C:\Program Files\Hotbar\bin\11.0.175.0 folder moved successfully.
C:\Program Files\Hotbar\bin folder moved successfully.
C:\Program Files\Hotbar folder moved successfully.
C:\Program Files\Smart-Ads-Solutions\SmartAds\1.4.2.0 folder moved successfully.
C:\Program Files\Smart-Ads-Solutions\SmartAds folder moved successfully.
C:\Program Files\Smart-Ads-Solutions folder moved successfully.
C:\Program Files\ezLife\ezLife\1.4.2.0 folder moved successfully.
C:\Program Files\ezLife\ezLife folder moved successfully.
C:\Program Files\ezLife folder moved successfully.
C:\Users\USER\AppData\Local\AskToolbar\Downloaded Program Files folder moved successfully.
C:\Users\USER\AppData\Local\AskToolbar folder moved successfully.
C:\ProgramData\50154185 folder moved successfully.
Folder C:\Users\USER\AppData\Roaming\SystemProc\ not found.
Folder C:\Program Files\Ask.com\ not found.
C:\Users\USER\AppData\Local\jesgkg.exe moved successfully.
C:\Users\USER\AppData\Local\vvvvdfdl.exe moved successfully.
C:\Windows\System32\wptzdgwraer.exe moved successfully.
C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe moved successfully.
C:\Windows\System32\_aknqvjjjggvqx.dll moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest moved successfully.
File C:\Windows\System32\GV3r3A.dll not found.
C:\ProgramData\818884014 moved successfully.
C:\ProgramData\1621065214 moved successfully.
File C:\Windows\System32\dhcpcsvc32.dll not found.
C:\Windows\System32\fdBthProxy32.dll moved successfully.
C:\Windows\System32\dbnmpntw32.dll moved successfully.
C:\Windows\GnuHashes.ini moved successfully.
C:\Users\USER\Desktop\LimeWire 5.5.7.lnk moved successfully.
File C:\Windows\System32\_Jk5_Z6O6pp3xTI.exe not found.
File C:\Windows\System32\GV3r3A.dll not found.
File C:\Windows\System32\wptzdgwraer.exe not found.
File C:\Windows\System32\dhcpcsvc32.dll not found.
File C:\Windows\System32\fdBthProxy32.dll not found.
File C:\Windows\System32\dbnmpntw32.dll not found.
C:\Windows\System32\dwmapi32.dll moved successfully.
C:\Windows\System32\dtsh32.dll moved successfully.
File C:\Windows\GnuHashes.ini not found.
C:\Windows\System32\dplayx32.dll moved successfully.
C:\Windows\System32\dot3gpclnt32.dll moved successfully.
C:\Windows\System32\dnssd32.dll moved successfully.
File C:\Users\USER\AppData\Roaming\020000000e3e68ef862P.manifest not found.
File C:\Users\USER\AppData\Roaming\020000000e3e68ef862C.manifest not found.
File C:\Users\USER\AppData\Roaming\020000000e3e68ef862S.manifest not found.
File C:\Users\USER\AppData\Roaming\020000000e3e68ef862O.manifest not found.
File C:\Users\USER\Desktop\LimeWire 5.5.7.lnk not found.
File C:\Windows\System32\aknqvjjjggvqx.dll not found.
File C:\Windows\System32\_aknqvjjjggvqx.dll not found.
File C:\Windows\System32\vldgpkus.dll not found.
File C:\Windows\System32\qjueplzs.dll not found.
C:\Users\USER\AppData\Local\ldcri.exe moved successfully.
File move failed. C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms scheduled to be moved on reboot.
File move failed. C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms scheduled to be moved on reboot.
File move failed. C:\Users\USER\ntuser.dat{64da0c68-2d1c-11df-876b-00a0d1c76a7e}.TM.blf scheduled to be moved on reboot.
File C:\ProgramData\1621065214 not found.
File C:\ProgramData\818884014 not found.
C:\Users\USER\AppData\Roaming\b78fe37 moved successfully.
C:\Windows\MegaManager.INI moved successfully.
C:\Users\USER\AppData\Local\aouicbw.exe moved successfully.
C:\Users\USER\AppData\Local\ieokfhd.exe moved successfully.
C:\Users\USER\Hygrothermique.ppt moved successfully.
C:\Users\USER\AppData\Roaming\wklnhst.dat moved successfully.
C:\Users\USER\AppData\Local\d3d8caps.dat moved successfully.
C:\Users\USER\AppData\Roaming\N1PqRpBz8wDw3Sk.vbs moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef687C.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef687P.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef687O.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef687S.manifest moved successfully.
C:\Users\USER\AppData\Local\oeuky_s2m.zl moved successfully.
File move failed. C:\Windows\System32\EhStorAuthn.dll scheduled to be moved on reboot.
C:\Users\USER\AppData\Roaming\020000000e3e68ef669C.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef669P.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef669O.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef669S.manifest moved successfully.
C:\Users\USER\AppData\Local\.mpid moved successfully.
C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000002.regtrans-ms moved successfully.
C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TMContainer00000000000000000001.regtrans-ms moved successfully.
C:\ProgramData\ntuser.dat moved successfully.
C:\ProgramData\ntuser.dat{f2c39869-997b-11de-a01f-00a0d1c76a7e}.TM.blf moved successfully.
C:\ProgramData\ntuser.dat.LOG1 moved successfully.
C:\ProgramData\ntuser.dat.LOG2 moved successfully.
C:\Users\USER\AppData\Local\novwdg.bat moved successfully.
C:\Windows\Sol.ini moved successfully.
C:\Windows\Fa.ini moved successfully.
C:\ProgramData\ElseFaceFace.geoscy moved successfully.
C:\ProgramData\ElseFaceFace.cjf3uy5 moved successfully.
C:\ProgramData\ElseFaceFace.jgdllq moved successfully.
C:\ProgramData\ElseFaceFace.ouqiwk moved successfully.
C:\ProgramData\ElseFaceFace.8hjzj moved successfully.
C:\ProgramData\ElseFaceFace.yvpoe7 moved successfully.
C:\ProgramData\ElseFaceFace.73yav moved successfully.
C:\ProgramData\ElseFaceFace.fjeg2f moved successfully.
C:\ProgramData\ElseFaceFace.zu7pp moved successfully.
C:\ProgramData\ElseFaceFace.6gnj9v3 moved successfully.
C:\ProgramData\ElseFaceFace.s8vflzc moved successfully.
C:\ProgramData\ElseFaceFace.bn5c9g moved successfully.
C:\ProgramData\ElseFaceFace.gh5gi moved successfully.
C:\ProgramData\ElseFaceFace.54tnnl moved successfully.
C:\ProgramData\ElseFaceFace.mg3c28 moved successfully.
C:\ProgramData\ElseFaceFace.3xoye moved successfully.
C:\ProgramData\ElseFaceFace.z9ev4 moved successfully.
C:\ProgramData\ElseFaceFace.dpse74h moved successfully.
C:\ProgramData\ElseFaceFace.6dtvy83 moved successfully.
C:\ProgramData\ElseFaceFace.2gd30l moved successfully.
C:\ProgramData\ElseFaceFace.jhd9zk moved successfully.
C:\ProgramData\ElseFaceFace.c62gi moved successfully.
C:\ProgramData\ElseFaceFace.ekehpb moved successfully.
C:\ProgramData\ElseFaceFace.jyh6j moved successfully.
C:\ProgramData\ElseFaceFace.ygzcx moved successfully.
C:\ProgramData\ElseFaceFace.nu9isun moved successfully.
C:\ProgramData\ElseFaceFace.tnykn moved successfully.
C:\ProgramData\ElseFaceFace.zmtdh moved successfully.
C:\ProgramData\ElseFaceFace.lmj6he moved successfully.
C:\ProgramData\ElseFaceFace.305fb9 moved successfully.
C:\ProgramData\ElseFaceFace.9lkggq moved successfully.
C:\ProgramData\ElseFaceFace.ocuufh moved successfully.
C:\ProgramData\ElseFaceFace.wyfhbp moved successfully.
C:\ProgramData\ElseFaceFace.mva3r moved successfully.
C:\ProgramData\ElseFaceFace.mzjbosq moved successfully.
C:\ProgramData\ElseFaceFace.eun5iv moved successfully.
C:\ProgramData\ElseFaceFace.0cn2xi7 moved successfully.
C:\ProgramData\ElseFaceFace.hq4qq1 moved successfully.
C:\ProgramData\ElseFaceFace.ampj4c moved successfully.
C:\ProgramData\ElseFaceFace.eghqwo moved successfully.
C:\ProgramData\ElseFaceFace.9fw58 moved successfully.
C:\ProgramData\ElseFaceFace.3w1e9 moved successfully.
C:\ProgramData\ElseFaceFace.b38f1 moved successfully.
C:\ProgramData\ElseFaceFace.r2tjb moved successfully.
C:\ProgramData\ElseFaceFace.cd9wj77 moved successfully.
C:\ProgramData\ElseFaceFace.lpz00 moved successfully.
C:\ProgramData\ElseFaceFace.6pail moved successfully.
C:\ProgramData\ElseFaceFace.slp9sni moved successfully.
C:\ProgramData\ElseFaceFace.3r0ysb3 moved successfully.
C:\ProgramData\ElseFaceFace.t3q7xv moved successfully.
C:\ProgramData\ElseFaceFace.67je0 moved successfully.
C:\ProgramData\ElseFaceFace.l3qcor moved successfully.
C:\ProgramData\ElseFaceFace.16unasi moved successfully.
C:\ProgramData\ElseFaceFace.w7n3esr moved successfully.
C:\ProgramData\ElseFaceFace.38d8dt moved successfully.
C:\ProgramData\ElseFaceFace.ex40kap moved successfully.
C:\ProgramData\ElseFaceFace.j1nkqe moved successfully.
C:\ProgramData\ElseFaceFace.2m4zh2z moved successfully.
C:\ProgramData\ElseFaceFace.tn2qi moved successfully.
C:\ProgramData\ElseFaceFace.kl2p4o moved successfully.
C:\Users\USER\AppData\Roaming\8ae53219b1eed16 moved successfully.
C:\Users\USER\AppData\Roaming\a4aa909277f05902 moved successfully.
C:\Users\USER\AppData\Roaming\63748b7d2b6a3a01 moved successfully.
C:\Users\USER\AppData\Roaming\c27cbd49e0593881 moved successfully.
C:\Users\USER\AppData\Roaming\bfc7de68dd119e54 moved successfully.
C:\Users\USER\AppData\Roaming\dee3fc7f8527d0b moved successfully.
C:\Users\USER\AppData\Roaming\ac981666fc7e19ba moved successfully.
C:\Users\USER\AppData\Roaming\23f24f37844e129 moved successfully.
C:\Users\USER\AppData\Roaming\455684d9ac97afeb moved successfully.
C:\Users\USER\AppData\Roaming\e72946d2b6e66723 moved successfully.
C:\Users\USER\AppData\Roaming\b28d1a6893f522a3 moved successfully.
C:\Users\USER\AppData\Roaming\a6eef0b317873ff moved successfully.
C:\Users\USER\AppData\Roaming\4a583c3f18ce7599 moved successfully.
C:\Users\USER\AppData\Roaming\ffdb1fd48f6810b8 moved successfully.
C:\Users\USER\AppData\Roaming\5f7cc7c04fec9228 moved successfully.
C:\Users\USER\AppData\Roaming\66eb6ca31a0ecea0 moved successfully.
C:\Users\USER\AppData\Roaming\5de7b8c4db83779f moved successfully.
C:\Users\USER\AppData\Roaming\94119a4d861604b9 moved successfully.
C:\Users\USER\AppData\Roaming\439f3b1b58212554 moved successfully.
C:\Users\USER\AppData\Roaming\7d3078ffd7892197 moved successfully.
C:\Users\USER\AppData\Roaming\7943c4a2493487d6 moved successfully.
C:\Users\USER\AppData\Roaming\16e9455483666708 moved successfully.
C:\Users\USER\AppData\Roaming\3a99cce6c8ba595d moved successfully.
C:\Users\USER\AppData\Roaming\a246c9722939aaa0 moved successfully.
C:\Users\USER\AppData\Roaming\541677ea5c785984 moved successfully.
C:\Users\USER\AppData\Roaming\443ca76a215599c6 moved successfully.
C:\Users\USER\AppData\Roaming\4dfb11e78b364215 moved successfully.
C:\Users\USER\AppData\Roaming\e57516d26016ae5d moved successfully.
C:\Users\USER\AppData\Roaming\85b7dcfbae225d42 moved successfully.
C:\Users\USER\AppData\Roaming\e304b69479921f1f moved successfully.
C:\Users\USER\AppData\Roaming\8045f51617523ce1 moved successfully.
C:\ProgramData\ElseFaceFace.g7b8ww moved successfully.
C:\ProgramData\ElseFaceFace.pm4kwy moved successfully.
C:\ProgramData\ElseFaceFace.tmh4kgs moved successfully.
C:\ProgramData\ElseFaceFace.8ewfdrw moved successfully.
C:\ProgramData\ElseFaceFace.vhsc3sx moved successfully.
C:\ProgramData\ElseFaceFace.494hg moved successfully.
C:\ProgramData\ElseFaceFace.oxhuah moved successfully.
C:\ProgramData\ElseFaceFace.82cou moved successfully.
C:\ProgramData\ElseFaceFace.o3860 moved successfully.
C:\ProgramData\ElseFaceFace.tl69au moved successfully.
C:\ProgramData\ElseFaceFace.tucoj moved successfully.
C:\ProgramData\ElseFaceFace.071ko1v moved successfully.
C:\ProgramData\ElseFaceFace.nm3hcby moved successfully.
C:\ProgramData\ElseFaceFace.8qvu0u moved successfully.
C:\ProgramData\ElseFaceFace.t9r3l moved successfully.
C:\ProgramData\ElseFaceFace.juwb1 moved successfully.
C:\ProgramData\ElseFaceFace.8e2vuob moved successfully.
C:\ProgramData\ElseFaceFace.r27p4q0 moved successfully.
C:\ProgramData\ElseFaceFace.m1llv moved successfully.
C:\ProgramData\ElseFaceFace.ae6fi moved successfully.
C:\ProgramData\ElseFaceFace.bw6h00s moved successfully.
C:\ProgramData\ElseFaceFace.fruljw moved successfully.
C:\ProgramData\ElseFaceFace.plee9 moved successfully.
C:\ProgramData\ElseFaceFace.l2u6jl moved successfully.
C:\ProgramData\ElseFaceFace.k77sj5q moved successfully.
C:\ProgramData\ElseFaceFace.alxcn moved successfully.
C:\ProgramData\ElseFaceFace.m74ic moved successfully.
C:\ProgramData\ElseFaceFace.erx5p moved successfully.
C:\ProgramData\ElseFaceFace.luj5g1 moved successfully.
C:\ProgramData\ElseFaceFace.874lwiq moved successfully.
C:\ProgramData\ElseFaceFace.ui51j moved successfully.
C:\ProgramData\ElseFaceFace.sdiotm moved successfully.
C:\ProgramData\ElseFaceFace.n7d8tx moved successfully.
C:\ProgramData\ElseFaceFace.8i9x2 moved successfully.
C:\ProgramData\ElseFaceFace.fzpzeax moved successfully.
C:\ProgramData\ElseFaceFace.mkh1f moved successfully.
C:\ProgramData\ElseFaceFace.f0e9x0 moved successfully.
C:\ProgramData\ElseFaceFace.2vr4n moved successfully.
C:\ProgramData\ElseFaceFace.h0oetim moved successfully.
C:\ProgramData\ElseFaceFace.wtojhw moved successfully.
C:\ProgramData\ElseFaceFace.ggd5eoa moved successfully.
C:\ProgramData\ElseFaceFace.0k627 moved successfully.
C:\ProgramData\ElseFaceFace.lr3vvf moved successfully.
C:\ProgramData\ElseFaceFace.9x55bs8 moved successfully.
C:\ProgramData\ElseFaceFace.3njq9o moved successfully.
C:\ProgramData\ElseFaceFace.dwumvs moved successfully.
C:\ProgramData\ElseFaceFace.mhkyiq moved successfully.
C:\ProgramData\ElseFaceFace.0ih1k moved successfully.
C:\ProgramData\ElseFaceFace.swi6c36 moved successfully.
C:\ProgramData\ElseFaceFace.q2d51 moved successfully.
C:\ProgramData\ElseFaceFace.ungi4sq moved successfully.
C:\ProgramData\ElseFaceFace.8j6qcu7 moved successfully.
C:\ProgramData\ElseFaceFace.vqbt7t moved successfully.
C:\ProgramData\ElseFaceFace.h97oi6r moved successfully.
C:\ProgramData\ElseFaceFace.ugqyij moved successfully.
C:\ProgramData\ElseFaceFace.afu6yv moved successfully.
C:\ProgramData\ElseFaceFace.g8wfama moved successfully.
C:\ProgramData\ElseFaceFace.ac2pf moved successfully.
C:\ProgramData\ElseFaceFace.3cdvf moved successfully.
C:\ProgramData\ElseFaceFace.8li6a moved successfully.
C:\ProgramData\axis enc body.33qk5id moved successfully.
C:\ProgramData\ElseFaceFace.ou7pqvr moved successfully.
C:\ProgramData\ElseFaceFace.yuwwwcy moved successfully.
C:\ProgramData\ElseFaceFace.qjqvqw7 moved successfully.
C:\ProgramData\ElseFaceFace.hzwsn moved successfully.
C:\ProgramData\ElseFaceFace.hyzys moved successfully.
C:\ProgramData\ElseFaceFace.gfkel2 moved successfully.
C:\ProgramData\ElseFaceFace.quf5j moved successfully.
C:\ProgramData\ElseFaceFace.sc6ot moved successfully.
C:\ProgramData\ElseFaceFace.ta82lbe moved successfully.
C:\ProgramData\ElseFaceFace.ud08hjx moved successfully.
C:\Users\USER\AppData\Roaming\81000b0a3e1b5479 moved successfully.
C:\Users\USER\AppData\Roaming\c8a308c8296a230 moved successfully.
C:\Users\USER\AppData\Roaming\5e723a73a4a5025a moved successfully.
C:\Users\USER\AppData\Roaming\cdbc80166fcf9641 moved successfully.
C:\Users\USER\AppData\Roaming\b3e1f6b621bde6cc moved successfully.
C:\Users\USER\AppData\Roaming\7d77870e5cfb5237 moved successfully.
C:\Users\USER\AppData\Roaming\62cc9819fd6ccc1f moved successfully.
C:\Users\USER\AppData\Roaming\9153140e6cf778ee moved successfully.
C:\Users\USER\AppData\Roaming\7e38d3a28d2da224 moved successfully.
C:\Users\USER\AppData\Roaming\226fdc4c43913361 moved successfully.
C:\Users\USER\AppData\Roaming\a8bbb26068d04ec4 moved successfully.
C:\Users\USER\AppData\Roaming\7147d737a238a936 moved successfully.
C:\Users\USER\AppData\Roaming\a8f3b8552939c9ef moved successfully.
C:\Users\USER\AppData\Roaming\96736d621498270f moved successfully.
C:\Users\USER\AppData\Roaming\5cab63de464afef0 moved successfully.
C:\Users\USER\AppData\Roaming\d6d30338c05225f moved successfully.
C:\Users\USER\AppData\Roaming\2f63163b8f715a4f moved successfully.
C:\Users\USER\AppData\Roaming\d9d7b3eb5b513024 moved successfully.
C:\Users\USER\AppData\Roaming\ca570e929b61843a moved successfully.
C:\Users\USER\AppData\Roaming\bd04fc2999f797a2 moved successfully.
C:\Users\USER\AppData\Roaming\f96f47983ea947c7 moved successfully.
C:\Users\USER\AppData\Roaming\607383dbccb59b2e moved successfully.
C:\Users\USER\AppData\Roaming\fef12f37dcb948ad moved successfully.
C:\Users\USER\AppData\Roaming\40223987c0cebab7 moved successfully.
C:\Users\USER\AppData\Roaming\d3b7710c893b3306 moved successfully.
C:\Users\USER\AppData\Roaming\95d5a7cb9a6e79c5 moved successfully.
C:\Users\USER\AppData\Roaming\b30c98a2ff27c30e moved successfully.
C:\Users\USER\AppData\Roaming\9c6ae86324a061b1 moved successfully.
C:\Users\USER\AppData\Roaming\a155e66e3aab6ad9 moved successfully.
C:\Users\USER\AppData\Roaming\d3f427fa42be82f3 moved successfully.
C:\Users\USER\AppData\Roaming\6e4b6a442fe0e193 moved successfully.
C:\Users\USER\AppData\Roaming\e3036fbf5aae0bfe moved successfully.
C:\Users\USER\AppData\Roaming\d4213771cb3525c1 moved successfully.
C:\Users\USER\AppData\Roaming\a3346eda4b0cfd4 moved successfully.
C:\Users\USER\AppData\Roaming\c7b35d06af4bfb8d moved successfully.
C:\Users\USER\AppData\Roaming\831b208a88e93360 moved successfully.
C:\Users\USER\AppData\Roaming\a985ccb733c25101 moved successfully.
C:\Users\USER\AppData\Roaming\2bfae833c7fc1064 moved successfully.
C:\Users\USER\AppData\Roaming\37213bd7aaad2c35 moved successfully.
C:\Users\USER\AppData\Roaming\41f8481da531d0be moved successfully.
C:\Users\USER\AppData\Roaming\28aa687f8110de6 moved successfully.
C:\Users\USER\AppData\Roaming\2bd50dd748c183a5 moved successfully.
C:\Users\USER\AppData\Roaming\6711ecaa1d825f6b moved successfully.
C:\Users\USER\AppData\Roaming\efdb813b65a9cee4 moved successfully.
C:\Users\USER\AppData\Roaming\d1f34e9ecd359e21 moved successfully.
C:\Users\USER\AppData\Roaming\f58978b65c6d65cc moved successfully.
C:\Users\USER\AppData\Roaming\4bb18495e17576b3 moved successfully.
C:\Users\USER\AppData\Roaming\87fb543eb0412b5 moved successfully.
C:\Users\USER\AppData\Roaming\f8668ca0a9e1d131 moved successfully.
C:\Users\USER\AppData\Roaming\dd8e81e4fedb3430 moved successfully.
C:\Users\USER\AppData\Roaming\64d7ccaa8130fb5f moved successfully.
C:\Users\USER\AppData\Roaming\5997e9adac5f0635 moved successfully.
C:\Users\USER\AppData\Roaming\9e9a66a88bf33f0 moved successfully.
C:\Users\USER\AppData\Roaming\d4c55b0d4dc57b8e moved successfully.
C:\Users\USER\AppData\Roaming\df14af5f167b0200 moved successfully.
C:\Users\USER\AppData\Roaming\9719e94dd2b95c9 moved successfully.
C:\Users\USER\AppData\Roaming\40fb8eaf21bf5131 moved successfully.
C:\Users\USER\AppData\Roaming\4365ceb689db76b7 moved successfully.
C:\Users\USER\AppData\Roaming\d7dc1d79cc6c3732 moved successfully.
C:\Users\USER\AppData\Roaming\5f05a3654f9bf3d9 moved successfully.
C:\Users\USER\AppData\Roaming\9e15c94812b106eb moved successfully.
C:\Users\USER\AppData\Roaming\c85b04e14f0a4258 moved successfully.
C:\Users\USER\AppData\Roaming\d9ce5d3e945f7d2e moved successfully.
C:\Users\USER\AppData\Roaming\f20c5eb8c3a40b moved successfully.
C:\Users\USER\AppData\Roaming\9b62ee65d0d84035 moved successfully.
C:\Users\USER\AppData\Roaming\4e1bffeedd341166 moved successfully.
C:\Users\USER\AppData\Roaming\a12bbe72ff31b169 moved successfully.
C:\Users\USER\AppData\Roaming\e6ed99d7dffe300c moved successfully.
C:\Users\USER\AppData\Roaming\df2be60059e8dfd8 moved successfully.
C:\Users\USER\AppData\Roaming\afd7c747f81f9f23 moved successfully.
C:\Users\USER\AppData\Roaming\70042177892a4e9c moved successfully.
C:\Users\USER\AppData\Roaming\30917d2e58b7327a moved successfully.
C:\Users\USER\AppData\Roaming\42be9fd7c4471cf9 moved successfully.
C:\Users\USER\AppData\Roaming\158f3657a04ab2e moved successfully.
C:\Users\USER\AppData\Roaming\a963a81567f2b7ed moved successfully.
C:\Users\USER\AppData\Roaming\a71eb07adcdf08b2 moved successfully.
C:\Users\USER\AppData\Roaming\49a8d5c820219a19 moved successfully.
C:\Users\USER\AppData\Roaming\5f3cb3f74c1f9f76 moved successfully.
C:\Users\USER\AppData\Roaming\a9d6154efe318fb0 moved successfully.
C:\Users\USER\AppData\Roaming\c034723b90e4e009 moved successfully.
C:\Users\USER\AppData\Roaming\5426b210899405e5 moved successfully.
C:\Users\USER\AppData\Roaming\9e0780f17c0291bb moved successfully.
C:\Users\USER\AppData\Roaming\b00c9f79c33a1b63 moved successfully.
C:\Users\USER\AppData\Roaming\6ae4f97c1c97afe6 moved successfully.
C:\Users\USER\AppData\Roaming\5cd6e9d637cd1fcb moved successfully.
C:\Users\USER\AppData\Roaming\f3717a7a2dca1b40 moved successfully.
C:\Users\USER\AppData\Roaming\932c8bbeb7795c87 moved successfully.
C:\Users\USER\AppData\Roaming\496defadf08ee227 moved successfully.
C:\Users\USER\AppData\Roaming\c7245dc4af2a06bd moved successfully.
C:\Users\USER\AppData\Roaming\c19731da185601a2 moved successfully.
C:\Users\USER\AppData\Roaming\bc9b86c370399662 moved successfully.
C:\Users\USER\AppData\Roaming\9002cb1dcf613c87 moved successfully.
C:\Users\USER\AppData\Roaming\32b98aa5c4ceb68d moved successfully.
C:\Users\USER\AppData\Roaming\df2a491171043ae0 moved successfully.
C:\Users\USER\AppData\Roaming\f526c83cf511cb6b moved successfully.
C:\Users\USER\AppData\Roaming\eddeaaeb754dcbfa moved successfully.
C:\Users\USER\AppData\Roaming\e213366115a84aa9 moved successfully.
C:\Users\USER\AppData\Roaming\b0999dcac3a66073 moved successfully.
C:\Users\USER\AppData\Roaming\64f8c16ecdd270f4 moved successfully.
C:\Users\USER\AppData\Roaming\c57445598e43466c moved successfully.
C:\Users\USER\AppData\Roaming\95111046d0d304c1 moved successfully.
C:\Users\USER\AppData\Roaming\7962a6edb2f537ad moved successfully.
C:\Users\USER\AppData\Roaming\632fc5dd2e07218d moved successfully.
C:\Users\USER\AppData\Roaming\d0de657e686e3b43 moved successfully.
C:\Users\USER\AppData\Roaming\84bdac14aba299e moved successfully.
C:\Users\USER\AppData\Roaming\3fde5be5c3ce6b1b moved successfully.
C:\Users\USER\AppData\Roaming\6c08d988874a2200 moved successfully.
C:\Users\USER\AppData\Roaming\9f3e768bbe9b067e moved successfully.
C:\Users\USER\AppData\Roaming\84949b0d1d3b5d5 moved successfully.
C:\Users\USER\AppData\Roaming\94803ae16c7d076f moved successfully.
C:\Users\USER\AppData\Roaming\693bdb6f4a5603f6 moved successfully.
C:\Users\USER\AppData\Roaming\bbd6c33be8bcb4f9 moved successfully.
C:\Users\USER\AppData\Roaming\a45e1bcab32bf3a2 moved successfully.
C:\Users\USER\AppData\Roaming\7829c672969947cd moved successfully.
C:\Users\USER\AppData\Roaming\c672d4a2d1edcc74 moved successfully.
C:\Users\USER\AppData\Roaming\ec94ab6994cdef5d moved successfully.
C:\Users\USER\AppData\Roaming\19b75171f4a946d1 moved successfully.
C:\Users\USER\AppData\Roaming\d9fa1368a991a610 moved successfully.
C:\Users\USER\AppData\Roaming\25f30a79d9ea960e moved successfully.
C:\Users\USER\AppData\Roaming\cf9e147692b5a229 moved successfully.
C:\Users\USER\AppData\Roaming\82ccbe49fdc23519 moved successfully.
C:\Users\USER\AppData\Roaming\571d64ffa12ad06d moved successfully.
C:\Users\USER\AppData\Roaming\16f9263f268ad3df moved successfully.
C:\Users\USER\AppData\Roaming\997abb3a2234a6c9 moved successfully.
C:\Users\USER\AppData\Roaming\678326e9af28a6d1 moved successfully.
C:\Users\USER\AppData\Roaming\64b765d6d79b199 moved successfully.
C:\Users\USER\AppData\Roaming\4e6afa1a3323b86 moved successfully.
C:\Users\USER\AppData\Roaming\5f8d03d2ff70c096 moved successfully.
C:\Users\USER\AppData\Roaming\b57910d21bd9eb35 moved successfully.
C:\Users\USER\AppData\Roaming\64e6c896722a582e moved successfully.
C:\Users\USER\AppData\Roaming\4c60ac4f7b2a8d72 moved successfully.
C:\Users\USER\AppData\Roaming\97a429078c9f418b moved successfully.
C:\Users\USER\AppData\Roaming\eb1cab14f460f9ce moved successfully.
C:\Users\USER\AppData\Roaming\de3dc8b97df2db20 moved successfully.
C:\Users\USER\AppData\Roaming\7ee99a63c590d75a moved successfully.
C:\Users\USER\AppData\Roaming\e304e64ba36b9540 moved successfully.
C:\Users\USER\AppData\Roaming\6b11e149124a34b5 moved successfully.
C:\Users\USER\AppData\Roaming\1342a7ee9dc2c00 moved successfully.
C:\Users\USER\AppData\Roaming\5d6eb93719638f21 moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef509C.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef509S.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef509O.manifest moved successfully.
C:\Users\USER\AppData\Roaming\020000000e3e68ef509P.manifest moved successfully.
C:\Users\USER\AppData\Roaming\5709554123b2b5db moved successfully.
C:\Users\USER\AppData\Roaming\71b937d425f041ba moved successfully.
C:\Users\USER\AppData\Roaming\6b09baf3d1431dba moved successfully.
C:\Users\USER\AppData\Roaming\fd712e7f41b73f4e moved successfully.
C:\Users\USER\AppData\Roaming\8f1cf5fa567a5bb9 moved successfully.
C:\Users\USER\AppData\Roaming\c748aa5094abe140 moved successfully.
C:\Users\USER\AppData\Roaming\c9405b3dd4f2e16e moved successfully.
C:\Users\USER\AppData\Roaming\211c25d295e34c41 moved successfully.
C:\Users\USER\AppData\Roaming\c02aff622a077c93 moved successfully.
C:\Users\USER\AppData\Roaming\90f807bed1ff3633 moved successfully.
C:\Users\USER\AppData\Roaming\5c7bf7bbc2922c81 moved successfully.
C:\Users\USER\AppData\Roaming\f0bba271186ba3a4 moved successfully.
C:\Users\USER\AppData\Roaming\b350ecfe33fe942d moved successfully.
C:\Users\USER\AppData\Roaming\183124fab7d6d386 moved successfully.
C:\Users\USER\AppData\Roaming\55326966926e809 moved successfully.
C:\Users\USER\AppData\Roaming\607560457b2a79b7 moved successfully.
C:\Users\USER\AppData\Roaming\a3028b173f84abfa moved successfully.
C:\Users\USER\AppData\Roaming\71c948d57de9c1da moved successfully.
C:\Users\USER\AppData\Roaming\95615a1c50af2930 moved successfully.
C:\Users\USER\AppData\Roaming\97bee691cb88c40d moved successfully.
C:\Users\USER\AppData\Roaming\90f61ffa2ab46973 moved successfully.
C:\Users\USER\AppData\Roaming\1654dfd01562b4bb moved successfully.
C:\Users\USER\AppData\Roaming\22a055e54fad2234 moved successfully.
C:\Users\USER\AppData\Roaming\c065a6fd3e0101a1 moved successfully.
C:\Users\USER\AppData\Roaming\514637d29895303e moved successfully.
C:\Users\USER\AppData\Roaming\ad75888fb368abf0 moved successfully.
C:\Users\USER\AppData\Roaming\4c3ac91a8d3c5c67 moved successfully.
C:\Users\USER\AppData\Roaming\7ce9a8fd21a5f866 moved successfully.
C:\Users\USER\AppData\Roaming\81666ab8e8ccfdfc moved successfully.
C:\Users\USER\AppData\Roaming\9c8e0576a1ce41d9 moved successfully.
C:\Users\USER\AppData\Roaming\202a4b489b915b6f moved successfully.
C:\Users\USER\AppData\Roaming\2f2b2927f3cd0d63 moved successfully.
C:\Users\USER\AppData\Roaming\34afa5d0b6134931 moved successfully.
C:\Users\USER\AppData\Roaming\6b0c2283a4670d4c moved successfully.
C:\Users\USER\AppData\Roaming\ea9ca2ac1c5be192 moved successfully.
C:\Users\USER\AppData\Roaming\4148a5cbafa84866 moved successfully.
C:\Users\USER\AppData\Roaming\5a2cb362f4ee318c moved successfully.
C:\Users\USER\AppData\Roaming\7bdbf60e9b94c076 moved successfully.
C:\Users\USER\AppData\Roaming\249e8293eb0d7fbf moved successfully.
C:\Users\USER\AppData\Roaming\51955b9dd2a0b97c moved successfully.
C:\Users\USER\AppData\Roaming\851bbfbfc58b4b2 moved successfully.
C:\Users\USER\AppData\Roaming\b92aec11e808ad45 moved successfully.
C:\Users\USER\AppData\Roaming\a59af8adc1732d53 moved successfully.
C:\Users\USER\AppData\Roaming\7d69ed4cc597d32e moved successfully.
C:\Users\USER\AppData\Roaming\a14e10aab9c12130 moved successfully.
C:\Users\USER\AppData\Roaming\e950b70c7e0d77f4 moved successfully.
C:\Users\USER\AppData\Roaming\f82875f89c4238c7 moved successfully.
C:\Users\USER\AppData\Roaming\1efcd075191c813f moved successfully.
C:\Users\USER\AppData\Roaming\175f22d3772b7138 moved successfully.
C:\Users\USER\AppData\Roaming\850f0a9491941057 moved successfully.
C:\Users\USER\AppData\Roaming\dcba4698878d6e moved successfully.
C:\Users\USER\AppData\Roaming\ce252cdaa8c30fc moved successfully.
C:\Users\USER\AppData\Roaming\fbc3090944e42ecc moved successfully.
C:\Users\USER\AppData\Roaming\63d4155249ab0c16 moved successfully.
C:\Users\USER\AppData\Roaming\60ffd288e1053a57 moved successfully.
C:\Users\USER\AppData\Roaming\bb57cc0374d4d737 moved successfully.
C:\Users\USER\AppData\Roaming\1fbf1acfb76638ac moved successfully.
C:\Users\USER\AppData\Roaming\ddf6cd83d824b7c8 moved successfully.
C:\Users\USER\AppData\Roaming\9ad40c6c20ab6560 moved successfully.
C:\Users\USER\AppData\Roaming\2b6ecaff50646d2 moved successfully.
C:\Users\USER\AppData\Roaming\3b1565f097fe7506 moved successfully.
C:\Users\USER\AppData\Roaming\773c10b7b60c00b8 moved successfully.
C:\Users\USER\AppData\Roaming\2b1f8babd0e2f51d moved successfully.
C:\Users\USER\AppData\Roaming\857da7d1d020e27d moved successfully.
C:\Users\USER\AppData\Roaming\1dd7e2701c1d0278 moved successfully.
C:\Users\USER\AppData\Roaming\6fffb7aa771b887 moved successfully.
C:\Users\USER\AppData\Roaming\91d430f635efc2f4 moved successfully.
C:\Users\USER\AppData\Roaming\5a7820e6a1b123dd moved successfully.
C:\Users\USER\AppData\Roaming\c23e28f5f5177915 moved successfully.
C:\Users\USER\AppData\Roaming\9cfc4f6bf13b8b1c moved successfully.
C:\Users\USER\AppData\Roaming\121cec4d48f4672c moved successfully.
C:\Users\USER\AppData\Roaming\b292b294d238410e moved successfully.
C:\Users\USER\AppData\Roaming\dccec97b9b4f6d83 moved successfully.
C:\Users\USER\AppData\Roaming\b993c3f1a1865a6d moved successfully.
C:\Users\USER\AppData\Roaming\baa67626feaf5313 moved successfully.
C:\Users\USER\AppData\Roaming\58eb79fa8b7e5a49 moved successfully.
C:\Users\USER\AppData\Roaming\cfe2c94aa76a879e moved successfully.
C:\Users\USER\AppData\Roaming\1c13f2c2ed466037 moved successfully.
C:\Users\USER\AppData\Roaming\41fd8baf4c989b57 moved successfully.
C:\Users\USER\AppData\Roaming\602bded9b93c79b moved successfully.
C:\Users\USER\AppData\Roaming\1638af5739b7668f moved successfully.
C:\Users\USER\AppData\Roaming\8ecde917efae92ea moved successfully.
C:\Users\USER\AppData\Roaming\4397ebb898f18c02 moved successfully.
C:\Users\USER\AppData\Roaming\44cf44449658d6e2 moved successfully.
C:\Users\USER\AppData\Roaming\7292e95413e193ee moved successfully.
C:\Users\USER\AppData\Roaming\39ba158b23762ee6 moved successfully.
C:\Users\USER\AppData\Roaming\d6e8a89b56427767 moved successfully.
C:\Users\USER\AppData\Roaming\b0596280536b364 moved successfully.
C:\Users\USER\AppData\Roaming\7dd532461b0b061e moved successfully.
C:\Users\USER\AppData\Roaming\1cd91b942a6e58dc moved successfully.
C:\Users\USER\AppData\Roaming\4c84dc85907e64d moved successfully.
C:\Users\USER\AppData\Roaming\4e8c2182f0c81563 moved successfully.
C:\Users\USER\AppData\Roaming\fa271e12429cbb8 moved successfully.
C:\Users\USER\AppData\Roaming\6c4268aa7fb500c6 moved successfully.
C:\Users\USER\AppData\Roaming\9c6dd0792afccd45 moved successfully.
C:\Users\USER\AppData\Roaming\4b22e99e16cf8e12 moved successfully.
C:\Users\USER\AppData\Roaming\2ac1e342a2899350 moved successfully.
C:\Users\USER\AppData\Roaming\8210bea8f436bac0 moved successfully.
C:\Users\USER\AppData\Roaming\968f9d7c8e0ca650 moved successfully.
C:\Users\USER\AppData\Roaming\825e3b8ccd8eae moved successfully.
C:\Users\USER\AppData\Roaming\6ccc688b78b7ba93 moved successfully.
C:\Users\USER\AppData\Roaming\6f38e9ac7e80959c moved successfully.
C:\Users\USER\AppData\Roaming\88b69beaaa23c92e moved successfully.
C:\Users\USER\AppData\Roaming\547480cc81fd0305 moved successfully.
C:\Users\USER\AppData\Roaming\b5ef6c0e6487eab6 moved successfully.
C:\Users\USER\AppData\Roaming\4b35ed0a7639b445 moved successfully.
C:\Users\USER\AppData\Roaming\a2b1f7c2a1932b3b moved successfully.
C:\Users\USER\AppData\Roaming\43ac3b87b6282f6e moved successfully.
C:\Users\USER\AppData\Roaming\da91f306c228a0a7 moved successfully.
C:\Users\USER\AppData\Roaming\4915ad929379195 moved successfully.
C:\Users\USER\AppData\Roaming\ca3e99288120348 moved successfully.
C:\Users\USER\AppData\Roaming\6544c7261e491d5 moved successfully.
C:\Users\USER\AppData\Roaming\403606b932c1a5d0 moved successfully.
C:\Users\USER\AppData\Roaming\298d3e0da54faac0 moved successfully.
C:\Users\USER\AppData\Roaming\5f6801efce392878 moved successfully.
C:\Users\USER\AppData\Roaming\c99b81a5914b1806 moved successfully.
C:\Users\USER\AppData\Roaming\9fe66e7d69e7634 moved successfully.
C:\Users\USER\AppData\Roaming\1d0df36b4499fc9f moved successfully.
C:\Users\USER\AppData\Roaming\936a24359273c99b moved successfully.
C:\Users\USER\AppData\Roaming\82154fb8ee96da80 moved successfully.
C:\Users\USER\AppData\Roaming\16e4d3a901855a7 moved successfully.
C:\Users\USER\AppData\Roaming\b18b717f2dd2d98a moved successfully.
C:\Users\USER\AppData\Roaming\22ea20dec720b648 moved successfully.
C:\Users\USER\AppData\Roaming\e63c9ee3e79ab40a moved successfully.
C:\Users\USER\AppData\Roaming\94d778aa18f5408 moved successfully.
C:\Users\USER\AppData\Roaming\4144045d1fddfdee moved successfully.
C:\Users\USER\AppData\Roaming\1907f7d24e654a7c moved successfully.
C:\Users\USER\AppData\Roaming\a9db0a08e95168b2 moved successfully.
C:\Users\USER\AppData\Roaming\de8ad9a6c8cc903 moved successfully.
C:\Users\USER\AppData\Roaming\597a09811ead352 moved successfully.
C:\Users\USER\AppData\Roaming\30b950a5926376d2 moved successfully.
C:\Users\USER\AppData\Roaming\8f072f9d807bb955 moved successfully.
C:\Users\USER\AppData\Roaming\7ec9a8e09f959a17 moved successfully.
C:\Users\USER\AppData\Roaming\b3c751a27ff5338c moved successfully.
C:\Users\USER\AppData\Roaming\afa3124e1d2eda5 moved successfully.
C:\Users\USER\AppData\Roaming\2d5cf18fce46cf19 moved successfully.
C:\Users\USER\AppData\Roaming\c9d7ce0a578200cd moved successfully.
C:\Users\USER\AppData\Roaming\9aa7954066aa5e50 moved successfully.
C:\Users\USER\AppData\Roaming\10e36a4c1c7517af moved successfully.
C:\Users\USER\AppData\Roaming\785f6e01a77828d moved successfully.
C:\Users\USER\AppData\Roaming\100515f68ccd45ee moved successfully.
C:\Users\USER\AppData\Roaming\7765b015ef1b2228 moved successfully.
C:\Users\USER\AppData\Roaming\4111af44b0f9246d moved successfully.
C:\Users\USER\AppData\Roaming\fltk.org folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\xml\data folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\xml folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\uploads.dat folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\themes\windows_theme folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\themes folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\promotion folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\mozilla-profile\updates\0 folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\mozilla-profile\updates folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\mozilla-profile\extensions folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\mozilla-profile\Cache folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\mozilla-profile folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\libtorrent folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\certificate folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\res\html folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\res\fonts folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\res\entityTables folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\res\dtd folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\res folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\plugins folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\modules folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\greprefs folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\dictionaries folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\US\chrome folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\US folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile\chrome folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\profile folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\pref folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults\autoconfig folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\defaults folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\components folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner\chrome folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser\xulrunner folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\browser folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire\.AppSpecialShare folder moved successfully.
C:\Users\USER\AppData\Roaming\LimeWire folder moved successfully.
Folder C:\Users\USER\AppData\Roaming\SystemProc\ not found.
C:\install.exe moved successfully.

OTL by OldTimer - Version 3.2.1.2 log created on 04192010_195552

jeanmimigab · le 20 Avr 2010 19:25

salut,

les suppressions se sont bien passées...

est ce que tu arrive à nouveau a démarrer en mode normal ???

si tu n'y arrive pas vérifie cela...

clique sur menu démarrer >> exécuter >> tape msconfig et clique sur OK

Si la commande "exécuter" n'est pas disponible au menu démarrer, fais la manipulation indiquée ici
http://www.commentcamarche.net/faq/6987 ... u-demarrer

vérifie les cases cochées ou non dans les onglets "général" et "démarrer" pour qu'ils soient comme sur ces deux images

si la configuration des cases n'est pas indentique, modifie en cochant ou dé-cochant les cases concernées.

Si tout est tel quel et que tu n'as toujours pas accès au mode normal, dit le moi et si possible indique moi ce qui se passe exactement quand tu essais de démarrer en mode normal ( message d'erreur, démarrage automatique en mode sans échec sans que tu le choisisses etc...) car certaines clefs de registre ont peut être étés modifiées par l'infection.

@++

nanoua971 · le 20 Avr 2010 21:09

Non, je n'arrive toujours pas a démarrer en mode normal.
quand je démarre sa démarre normalement mais au moment d'afficher le bureau sa ne donne rien, juste un écran noir. et c tout.

Probleme internet explorer • page 2

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Re: Probleme internet explorer

Sujets similaires

Qui est en ligne